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Preface 



This publication lists the messages and codes produced 
by Version 1 Release 5 of the IBM program product 
Resource Access Control Facility (RACF), Program 
Number 5740-XXH. The publication contains the 
following chapters: 



Readers of this publication should have a background 
knowledge of the information provided in the following 
related publications. 

Related RACF Publications 



Chapter 1 : RACF System Operator Messages - lists 
the system operator messages issued by RACF. 
(Message format is ICHxnnt.) 

Chapter 2: Routing and Descriptor Codes - lists the 
RACF system operator messages with the routing and 
descriptor code for each. (Message format is 
ICHxnnt.) 



Resource Access Control Facility (RACF): General 
Information Manual, GC28-0722. 

Resource Access Control Facility (RACF): Command 
Language Reference, SC28-0733. 

System Programming Library: Resource Access 
Control Facility (RACF), SC28-1343. 



Chapter 3: RACF Data Set Initialization Messages - 
lists the messages issued by RACF during the 
initialization of the RACF data set. (Message format is 
ICH8nnn.) 

Chapter 4: RACF Command Messages - lists the 
command messages issued by RACF during the 
processing of the RACF commands. (Message format 
is ICHxxnnnt.) 

Chapter 5: RACF Manager, Utility, Report Writer, 
and Miscellaneous Messages - lists the messages issued 
by the RACF manager, utility programs, the utility 
command, and the report writer, as well as 
miscellaneous messages. (Message format is 
ICHxxnnnt.) 



Resource Access Control Facility (RACF): Security 
Administrator's Guide, SC28-1340. 

Resource Access Control Facility (RACF): Program 
Logic Manual, LY28-0730. 

Related OS/VS2 System Publications 

OS/VS Message Library: VS2 System Messages, 
GC38-1002. 

OS/VS Message Library: VS2 System Codes, 
GC38-1008. 

OS/VS Message Library: VS2 Routing and 
Descriptor Codes, GC38-1102. 



Appendix A: Problem Determination - identifies the 
activity shown under the heading 'Problem 
Determination' for applicable messages and codes. 

About This Book 

The messages and codes have been organized into 
chapters so that the publication can be separated for 
easy use (if desired) based on the needs of the 
installation. 

Note that throughout this publication, all messages 
within each chapter are arranged in alphameric order 
by message identifier. 



Data Facility Device Support Users Guide and 
Reference, SC28-3952. 

Recovery Procedures 

Refer to the topic "Recovery Procedures" in the 
publication RACF Installation Reference Manual for a 
description of the procedures for recovering from 
failures occurring during the processing of the RACF 
manager, RACF data set, RACF commands, and other 
programs using the RACF manager. 
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Summary of Amendments 



| Summary of Amendments 
for SC38-1014-5 
RACF Version 1, Release 6 

Additions and changes have been made throughout this publication to 
incorporate the functions of RACF Version 1 , Release 6. 

New Messages 

The following messages are added: 

RACF RACINIT Messages - ICH301I, ICH302D 

RACF Initialization Messages - ICH522I 

RACF Routing and Descriptor Codes - ICH301I, ICH302D, ICH522I 

ADDGROUP - ICH00008I 

CONNECT -ICH0201 II 

PERMIT - ICH06009I, ICH06010I 

ADDSD/DELDSD - ICH09034I 

SETROPTS - ICH14013I, ICH14014I, ICH14015I, ICH14016I 

ALTGROUP - ICH20020I 

ALTDSD - ICH22020I 



LISTUSER-ICH30011I 
LISTGRP - ICH32005I 
LISTDSD - ICH35007I 

Miscellaneous Messages 

ICHUT100 - ICH6 10071 

Changed Messages 

RACF System Operator Messages - ICH408I, ICH508I, ICH512I, 
ICH802D, ICH901I 

CONNECT - ICH02007I, ICH02009I 

ADDSD/DELDSD - ICH09007I, ICH09010I, ICH09025I 

RALTER-ICH11001I 

SETROPTS - ICH14001I 

ALTDSD - ICH22006I, ICH22014I, ICH22015I 

LISTGRP - ICH3 20021 



Summary of Amendments 

for SC38-1014-4 

RACF Version 1, Release 5 

Additions and changes have been made throughout this publication to 
incorporate the functions of RACF Version 1, Release 5. 

New Messages 

The following messages are added: 
RACF Initialization Messages - ICH521I 
SETROPTS -ICH 1401 II 
RDEFINE-ICH 100051 
ALTGROUP - ICH20019I 



Changed Messages 

The following messages are changed: 

RACF Processing Messages - ICH408I, ICH409I 

RACF Initialization Messages - ICH508I, ICH512I 

ADDSD and DELDSD - ICH09002I, ICH09004I, ICH09005I, 
ICH09006I, ICH09008I, ICH09011I, ICH09012I, ICH09013I, 
ICH09016I, ICH09019I, ICH09020I, ICH09024I, ICH09027I 

ALTDSD - ICH22001I, ICH22005I 

LISTUSER - ICH30001I 

Deleted Messages 

The following messages are deleted: 

RACF Data Set Extend Utility Program - All messages 
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Summary of Amendments 

for SC38-1014-3 

RACF Version 1, Release 4 

Additions and changes have been made throughout this publication to 
incorporate the functions of RACF Version 1 , Release 4. 

New Messages 

The following messages are added: 

RACF Initialization Messages - ICH516I, ICH517I, ICH518I, 
ICH519I,ICH520I. 

RACHECK Operator Messages - ICH801I, ICH802A. 

RACDEF Operator Messages - ICH901 A. 

PASSWORD - ICH08010I, ICH08011I, ICH08012I, ICH08013I, 
ICH08014I, ICH08015I. 

ADDSD and DELDSD - ICH09029I. 

SETROPTS - ICH14009I, ICH14010I. 

ALTGROUP- ICH20016I, ICH20017I, ICH20018I. 

ALTUSER - ICH21016I, ICH21017I, ICH21018I. 

RACF Miscellaneous Messages - ICH70002I, ICH70003I. 



Routing and Descriptor Codes - ICH501A, ICH505A, ICH516I, 
ICH517I, ICH518I, ICH519I, ICH801I, ICH802A, ICH901A. 

Deleted Messages 

The following message is deleted: 
RACF Initialization Messages - ICH514I. 

Changed Messages 

The following messages are changed: 

RACF Processing Messages - ICH408I. 

Initialization Messages - ICH501 A, ICH505A, ICH508I, ICH509I, 
ICH511I, ICH512I. 

RACF Miscellaneous Messages - ICH70001I. 

The contents of Chapter 3: RACF Completion Codes have been 
moved to OS/ VS Message Library: VS2 System Codes. 
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Chapter 1: RACF System Operator Messages 



This chapter lists the system operator messages issued by RACF. See 
Chapter 2 for the routing and descriptor codes for these messages. 
These messages are routed to a system console or security console. 

The format of these messages is: 

ICHxnnt text 

Where: 

ICH identifies the message as a RACF message. 

x identifies the RACF function, where: 

= SAF initialization (Refer to OS/VS2 Message Library: 

System Messages or MVS/XA Message Library: System 
Messages) 

3 = RACF RACINIT 

4 = RACF processing 

5 = RACF initialization 

6 = RACF data set extend utility program 

7 = RACF status 

nn is the message serial number, 
t is the type code, where: 

A = action; operator must perform a specific action. 

D = decision; operator must choose an alternative. 

E = eventual action required. 

1 = information; no operator action is required. 

W = wait; processing stops until action is determined and 
performed. 



RACFRA CINIT Messages 



ICH30 1 1 MAXIMUM PASSWORD ATTEMPTS BY SPECIAL 
USER userid [AT TERMINAL terminalid] 

Explanation: The user specified by userid has made more than the 
permissible number of attempts to enter a password. If this was not a 
batch job, the last attempt was from the terminal specified by 
terminalid. Because the specified user has the SPECIAL attribute, 
the security administrator has the option of not revoking the user. 
This message is followed by message ICH302D. 

System Action: None. 

Operator Response: None. 

Programmer Response: None. 

Problem Determination: None. 



ICH302D REPLY Y TO ALLOW ANOTHER ATTEMPT OR N 
TO REVOKE USERID 

Explanation: This message follows message ICH302I. 

System Action: If the response is Y, the user specified by message 
ICH302I is allowed another attempt to logon. A failure during this 
attempt will cause message ICH302I. to be reissued. If the response 
is N, the user specified by message ICH302I is revoked. 

Operator Response: Reply with either Y or N. 

Programmer Response: None. 

Problem Determination: None. 

RA CF Processing Messages 

ICH401I (xxx ABEND ) 

/ RESTART KEY HIT J> DURING RACF 

) I/O ERROR AT RBA yyyyyy) PROCESSING 

OF /ADD ~~ "N REQUEST FOR ENTRY zzz 
\ ALTER / 

\alteri 
j delete i 

/ DELETEA> 
A LOCATE [ 
/NEXT I 
/ NEXTC \ 
^RENAME/ 

[IN CLASS ( TAPEVOL )"| 
<DASDVOL > 
(TERMINAL) J 

K PRIMARY) RACF DATA SET SEQUENCE nnn, dsnl 
BACKUP J* J 

Explanation: An error occurred during RACF processing. If an 
ABEND occurred, 'xxx' indicates the ABEND code. If an I/O error 
occurred, 'yyyyyy' indicates the RBA at which the I/O error 
occurred. The message also indicates the request type which the 
RACF manager was processing when the error occurred. Entry 'zzz' 
indicates the name of the RACF data set entry which was being 
processed. 

For resources other than DASD data sets, the class name is also 
supplied. The first four characters of this class name and a hyphen 
precede the entry name 'zzz' in the RACF data set index. For 
example, the index name of TAPE-T12345 is used to locate the entry 
for the entity T 123 45 in class TAPEVOL. Note that the complete 
version of this message is sent only to the security console. An 
abbreviated version of this message is sent to the programmer and 
consists of ICH401I (error) DURING RACF PROCESSING. 
('error' indicates the type of error thai occurred.) 

If more than one RACF data set exists, the data set referred to in this 
message is indicated by 'dsn' with sequence number 'nnn'. 

System Action: The indicated request to the RACF manager failed. 
Processing of the request is terminated. 

Operator Response: Report this message to the system programmer 
and/or the RACF administrator and save the message output. 
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Programmer Response: (1) If message ICH402I, ICH403I, or 
ICH404I does not follow this message at the security console, the 
error occurring in the RACF data set may not represent a permanent 
error. Attempt to reenter the RACF request (either the RACF 
command or the utility program), or cause the RACF SVC to be 
invoked again (such as reentering the LOGON command, rerunning 
the job, or retrying dynamic allocation). (2) If message ICH402I, 
ICH403I, or ICH404I does follow this message, then a permanent 
error may exist in the RACF data set. Perform the action as 
specified by the problem determination section for that message. (3) 
If an I/O error is occurring frequently on the RACF data set, an 
alternate device could be considered for the next IPL. 

Problem Determination: (1) If an ABEND occurred, check the 
LOGREC data set for diagnostic information. (2) If an I/O error 
occurred, determine if the device or volume is malfunctioning. For a 
permanent I/O error, also refer to the LOGREC data set for 
diagnostic information. (3) If message ICH402I, ICH403I, or 
ICH404I follows this message, refer to the action specified for that 
message in the problem determination section. 



ICH402I 



BAM BLOCK AT RBA xxx MAY NOT REFLECT 
ACTUAL SPACE USAGE 



Explanation: An error has occurred during RACF processing when 
attempting to allocate or de-allocate space in the RACF data set. 
The BAM block at RBA 'xxx' may not be accurate. This message 
follows message ICH401I. If more than one RACF data set exists, 
the data set referred to in this message is the data set named in the 
preceding ICH401I message. 



Operator Response: Report this message to the system programmer 
and/or RACF administrator and save the message output. 

Programmer Response: See problem determination. 

Problem Determination: The control information in the RACF data 
set may not be accurate. Execute the RACF data set verification 
utility program (ICHUT200) to determine if there is an inconsistency 
in the index structure. If an inconsistency is found, execute the 
RACF BLKUPD utility command (ICHUT300) to correct the index 
structure so that it accurately reflects the contents of the RACF data 
set. Refer to Section 6 in the publication RACF Program Logic 
Manual for additional information on how to diagnose and correct 
the problem described by this message. 



ICH404I 



ICB RECORD HAS NOT BEEN UPDATED - 
JTOPLEVEL INDEX RBAl IS INCORRECT 
i SEQUENCE SET RBA ( 



) 



Explanation: An error occurred during RACF processing. The header 
record (ICB) in the RACF data set had not been updated before the 
failure occurred in the RACF data set. Updates to the index 
structure (that is the top level index block or the beginning of the 
sequence set) are not reflected in the ICB. The latest updates to the 
index will not be reflected in searches of the RACF data set. This 
message follows message ICH401I. If more than one RACF data set 
exists, the data set referred to in this message is the data set named in 
the preceding ICH401I message. 

System Action: RACF processing of the request terminates. 



System Action: RACF processing of the request indicated in message 
ICH401I terminates. 



Operator Response: Report this message to the system programmer 
and/or the RACF administrator and save the message output. 



Operator Response: Report this message to the system programmer 
and/or the RACF administrator and save the message output. 

Programmer Response: See problem determination. 

Problem Determination: The control information in the RACF data 
set may not be accurate. Execute the RACF data set verification 
utility program (ICHUT200) to determine the inconsistency between 
the BAM mappings and the actual space allocated. If a problem is 
found, execute the RACF BLKUPD utility command (ICHUT300) 
to correct the BAM blocks so they accurately reflect the space 
allocated. Refer to Section 6 in the publication RACF Program Logic 
Manual for additional information on how to diagnose and correct 
the problem described by this message. 

ICH403I INDEX MAY BE INVALID; LEVEL nn INDEX BEING 
PROCESSED 

FOR (ADDITION ^AT TIME OF FAILURE 
{DELETION^ 

Explanation: An error occurred during RACF updating of the index in 
the RACF data set. The level index being processed is indicated by 
'nn'. This message follows message ICH401I. If more than one 
RACF data set exists, the data set referred to in this message is the 
data set named in the preceding ICH401I message. 

System Action: RACF processing of the request indicated in message 
ICH401I terminates. 



Programmer Response: See problem determination. 

Problem Determination: The control information in the RACF data 
set may not be accurate. Execute the RACF data set verification 
utility program (ICHUT200) to determine if there is an inconsistency 
in the ICB and index structure. If an inconsistency is found, execute 
the RACF BLKUPD utility command (ICHUT300) to update the 
ICB so that it accurately reflects the contents of the index structure. 
Refer to Section 6 in the publication RA CF Program Logic Manual 
for additional information on how to diagnose and correct the 
problem described by this message. 

ICH405I INSUFFICIENT SPACE ON RACF DATA SET 

K PRIMARY^ RACF DATA SET SEQUENCE nnn, dsn"| 
BACKUP / J 

Explanation: The RACF data set does not contain sufficient space to 
handle the RACF request. Either a request was made for a large 
amount of space or there is very little space available in the RACF 
data set. If more than one RACF data set exists, the data set 
referred to in this message is indicated by 'dsn' with sequence number 
'nnn'. 

System Action: RACF processing of the request terminates. 

Operator Response: Report this message to the system programmer 
and/or RACF administrator and save the message output. 
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Programmer Response: See problem determination. 

Problem Determination: Execute the RACF data set verification 
utility program (ICHUT200) to determine the amount of available 
space in the RACF data set. If more space is needed, delete any 
unused profiles from the RACF data set. 



ICH408I 



ICH406I RACF DATA SET INDEX FULL 

(PRIMARY^ RACF DATA SET SEQUENCE nnn, 
(BACKUP ) 



, dsn 



Explanation: During RACF processing, an attempt was made to 
extend the index to another level, but the maximum number of index 
levels (10) had been reached. If more than one RACF data set 
exists, the data set referred to in this message is indicated by 'dsn' 
with sequence number 'nn'. 

System Action: RACF processing of the request terminates. 

Operator Response: Report this message to the system programmer 
and/or the RACF administrator and save the message output. 

Programmer Response: See problem determination. 

Problem Determination: Execute the RACF data set verification 
utility program (ICHUT200) to determine the index structure and 
index levels. Delete unused profiles to reduce the number of index 
entries and make space available. If an error in the index structure is 
suspected, execute the RACF data set verification utility program 
(ICHUT200) to determine if there is an inconsistency. If there is an 
inconsistency, then execute the RACF BLKUPD utility command 
(ICHUT300) to correct any problems in the index of the RACF data 
set. RACF allows a maximum of 10 index levels. 

ICH407I RACF DATA SET INDEX ERROR. SEARCH ON 
ENTRY xxx 

K PRIMARY) RACF DATA SET SEQUENCE nnn, dsn] 
BACKUP j J 

Explanation: An index error in the RACF data set was detected while 
RACF was performing an index search. The name of the entry being 
searched for is indicated by 'xxx". This message is issued if: 

1. During the index search, a block is found which is not an index 
block. 

2. The data pointed to by a level one index block is not the entry 
for 'xxx'. 

If more than one RACF data set exists, the data set referred to in this 
message is indicated by 'dsn' with sequence number 'nnn'. 

System Action: RACF processing of the request terminates. 

Operator Response: Report this message to the system programmer 
and/or the RACF administrator and save the message output. 

Programmer Response: See problem determination. 

Problem Determination: Execute the RACF data set verification 
utility program (ICHUT200) to determine the error in the index tree 
in the RACF data set. Execute the RACF BLKUPD utility 
command (ICHUT300) to correct the error in the index structure. 



USER (userid) GROUP (group-name)) 

NAME (user-name) 
JOB (jobname) STEP (stepname) 

[resource-name] 
[CL(class-name)] [VOL(vol-serial)] 

LOGON/JOB INITIATION - 

/ INVALID PASSWORD ^ 

) INVALID GROUP ' 

) INVALID OIDCARD 

_ \ NOT AUTHORIZED TO TERMINAL - 

{INSUFFICIENT ACCESS AUTHORITY ] 

PROFILE NOT FOUND 
WARNING: INSUFFICIENT ACCESS AUTHORITY) 
ACCESS INTENT (access-authority) 
__ACCESS ALLOWED (access-authority) 

"INSUFFICIENT AUTHORITY TO EXTEND- 
TO A NEW VOLUME 
ACCESS ALLOWED (access-authority) 

[FROM generic-profile-name(G)] 

RENAME - 

/GROUP NOT DEFINED \ 

\USER NOT MEMBER OF GROUP / 
^INSUFFICIENT GROUP AUTHORITY > 
JNEW NAME ALREADY DEFINED i 



\USER NOT RACF-DEFINED 






.(1 



VI 



[DELETE - 
(resource NOT FOUND 
(INVALID VOLUME f J 

DEFINE - 

/ GROUP NOT DEFINED \ 

\ USER NOT MEMBER OF GROUP / 
J INSUFFICIENT GROUP AUTHORITY > 
j RESOURCE ALREADY DEFINED I 
'USER NOT RACF-DEFINED ) 

R[FULL VIOLATION ON COMMAND command! 
[PARTIAL VIOLATION ON COMMAND command] jj 

Explanation: This message is routed to the security console for all ( 1 ) 
detected unauthorized attempts to enter the system; that is, a user 
has supplied an invalid password, OIDCARD, or group name during 
TSO logon or when submitting a batch job, (2) detected 
unauthorized attempts to access a RACF-protected resource; that is, 
a user does not have sufficient authority or provides invalid data 
when accessing a RACF-protected resource, and (3) detected 
command violations; that is, unauthorized attempts to modify profiles 
on the RACF data set. It also indicates the type of request the user 
attempted; userid, group-name and user-name indicates the user, 
group and name. For users not defined to RACF, the job and step 
are indicated by 'jobname' and 'stepname'. (For batch users, 
'stepname' is blank.) 



Notes: 



All violations (except LOGON/INITIATION and COMMAND 
violations) are issued as write-to-programmer (WTP) messages. 

When a user is denied access to a RACF-protected resource 
because of the return code from the RACHECK installation exit 
routine, the user's allowed access may be inconsistent with the 
requested access. (For example, access allowed was ALTER, 
access requested was READ, but the request for access was 
denied.) 
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3. A user who has ALTER access authority to a DASD volume can 
scratch a data set on that volume even if the user does not have 
the required ALTER access authority to that particular data set. 
In this case, message ICH408I is issued even though the data set 
is scratched. 

4. When RACF verifies a password during TSO logon or when a 
batch job begins, the message will include "NAME (???)." 

5. The "PROFILE NOT FOUND" message will only be issued if 
RACFIND=YES was specified on the RACHECK macro 
instruction. 

System Action: If the message includes WARNING: INSUFFICIENT 
ACCESS AUTHORITY, RACF allows access to the resource. In all 
other cases, RACF processing of the request terminates. 

Operator Response: Report this message to the RACF administrator 
and/or follow the security procedures established for the installation. 

Programmer Response: If the message includes WARNING: 
INSUFFICIENT ACCESS AUTHORITY, contact the resource 
owner or the security administrator to obtain authorization to access 
the resource. 

Problem Determination: Detailed information about the violation is 
available on the SMF (RACF Processing) type 80 record that is 
produced at the same time as this message. 



ICH409I xxxl-yy] ABEND DURING /RACINIT ' 

I RACHECK 
<RACDEF 

Iraclist 
\genlist , 
(processing validation^ 
(parameter j 



Explanation: A failure occurred during RACF processing of the 
RACINIT, RACHECK, RACDEF, or RACLIST SVC, or while 
building the in-storage generic profiles. The decimal ABEND code is 
indicated by 'xxx'. If the last two digits of the ABEND code are 82, 
83, or 85, then the contents of register 15 at the time of ABEND are 
indicated by 'yy'. 

System Action: RACF processing is terminated. 

Operator Response: Report this message to the system programmer 
and/or RACF administrator and save the message output. 

Programmer Response: Retry the operation. 

Problem Determination: For a description of the RACF ABEND and 

reason codes, refer to OS/VS Message Library: VS2 System Codes. 
Check the LOGREC data set for diagnostic information relating to 
the failure. 

ICH4 1 01 RACF UNABLE TO BACK UP UPDATE OF xxx. 
BACKUP RACF DATA SET SEQUENCE nnn, dsn 

Explanation: A failure occurred in attempting to duplicate on the 
backup data set an update performed in the corresponding primary 
data set. The data set is identified by: 

xxx - name of entry in RACF data set 
nnn - data set sequence number (1 to 255) 
dsn - data set name 

System Action: RACF has not duplicated the update operation. 
Processing continues. 



Operator Response: Notify system programmer. 

Programmer Response: See problem determination. 

Problem Determination: If this message is preceded by message 
ICH401I, ICH405I, ICH406I, or ICH407I, the error was 
encountered on the backup data set. Otherwise, the backup data set 
was not in synchronization with its primary data set. 

RACF Initialization Messages 



ICH500I I/O ERROR DURING RACF INITIALIZATION 

UPRIMARY^ RACF DATA SET SEQUENCE nnn 
^BACKUP j 



i, dsn] 



Explanation: During RACF initialization, an I/O error occurred on 
the RACF data set. Message ICH502A follows this message. 

System Action: The system waits for the operator's reply. 

Operator Response: Notify system programmer. 

Programmer Response: Determine if the device or volume used for the 
RACF data set is functioning properly. 

Problem Determination: None 

ICH501 1 —RACF IS NOT ACTIVE-- 

Explanation: During RACF initialization, either a RACF or a system 
error occurred. 

System Action: RACF becomes inactive and IPL continues. Even 
though RACF is inactive, it allows access to the following: 

• Started task resources 

• A user's own resources 

• Any other resources to which the operator allows access 

Operator Response: Notify the system programmer. 

Programmer Response: Correct the problem and IPL again. 

Problem Determination: A message (either ICH51 II, ICH512I, 
ICH517I, ICH518I, or ICH519I) precedes this message and indicates 
the cause of the error. 

ICH502A SPECIFY NAME FOR (PRIMARY^ RACF 

(BACKUP | 
DATA SET SEQUENCE nnn OR 'NONE' 

Explanation: The data set name table indicates that a primary (or 
backup) data set is requested for the sequence number indicated by 
'nnn'. However, either no data set name was given in the table or an 
error occurred while the data set was being processed. In the latter 
case, a message, (either ICH500I, ICH503I, ICH506I, ICH5 101, or 
ICH515I) precedes this message. 

System Action: The system waits for the operator's reply. 

Operator Response: Specify either (1) the name of an alternate 
RACF data set to be used or (2) NONE if no primary (or backup) 
RACF data set is to be used for this sequence number. Note that if 
an alternate data set is specified, it must be cataloged and online. 
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Programmer Response: See problem determination. 

Problem Determination: Ensure that the RACF data set is cataloged 
and online. Also that the device on which the RACF data set is 
mounted is functioning properly. Ensure that templates of the 
correct level were added to the RACF data set if the data set was 
updated by the RACF data set initialization program ICHMINOO. 
(Down-level templates can cause a RACF manager error.) 



ICH503I RACF DATA SET NOT FOUND 

B PRIMARY \ RACF DATA SET SEQUENCE i 
BACKUP J 



n, dsnl 



Explanation: During initialization, the RACF data set could not be 
found. Message ICH502I follows this message. 

System Action: The system waits for the operator's reply. 

Operator Response: Notify the system programmer. 

Programmer Response: Ensure the RACF data set is cataloged and 
online. 

Problem Determination: None 

ICH504I USER ATTRIBUTE DATA SET NOT FOUND 

Explanation: During RACF initialization, the TSO UADS data set 
could not be found. The UADS data set had been defined in 
MSTRJCL. 

System Action: The system continues with the IPL, but TSO is not 
usable until the next IPL. 

Operator Response: Report this message to the system programmer. 

Programmer Response: If TSO is to be used before the next IPL, a 
re-IPL is required to have TSO active. 

Problem Determination: Ensure the TSO UADS data set is cataloged 
and online. 

ICH505A RACF INITIALIZATION ABEND S'xxx' 

Explanation: An ABEND occurred during RACF initialization. 

System Action: RACF becomes inactive and IPL continues. Even 
though RACF is inactive, it allows access to the following: 

• Started task resources 

• A user's own resources 

Any other resources to which the operator allows access 

Operator Response: Notify the system programmer. 

Programmer Response: See problem determination. 

Problem Determination: Refer to OS/VS Message Library: VS2 
System Codes for ABEND code S 'xxx'. If it is necessary to take a 
dump, refer to Appendix A: Problem Determination for the 
procedure to follow. The SDUMP and LOGREC data sets provide 
other diagnostic information. Correct the error and IPL again. 

ICH506I RACF DATA SET CANNOT BE USED 

(PRIMARY) RACF DATA SET SEQUENCE nnn, dsnl 
(BACKUP / J 

Explanation: The data set is not usable as a RACF data set because 
( 1 ) the ICB indicates that the data set has been extended, (2) the 
data set was used as input in the ICHUT400 utility with the 



LOCKINPUT parameter specified, or (3) the initialization of the 
RACF data set failed. Message ICH502I follows this message. 

System Action: RACF initialization continues. 

Operator Response: Notify the system programmer. 

Programmer Response: Ensure that the correct RACF data set is 
specified in MSTRJCL or in the operator's reply to message 
ICH502A. 

Problem Determination: None 

ICH508I ACTIVE RACF EXITS: (NONE ) 

) name,..., name ( 

Explanation: During RACF initialization, one or more of the 
| following installation exit routines or tables indicated by 'name' were 
loaded from LPA and are in effect for this IPL. 

ICHCCXOO - Command pre-processing exit 
ICHCNXOO - Command pre-processing exit 
ICHDEX01 - Data encryption exit 
ICHNCVOO - Naming conventions table 
ICHPWX01 - New-password processing exit 
ICHRCX01 - RACHECK pre-processing exit 
ICHRCX02 - RACHECK post-processing exit 
ICHRDX01 - RACDEF pre-processing exit 
ICHRDX02 - RACDEF post-processing exit 
ICHRIX01 - RACINIT pre-processing exit 
ICHRIX02 - RACINIT post-processing exit 
ICHRFX01 - FRACHECK pre-processing exit 
ICHRFX02 - FRACHECK post-processing exit 
ICHRLX01 - RACLIST pre- and post-processing exit 
ICHRLX02 - RACLIST selection exit 

System Action: RACF initialization continues. 

Operator Response: Ensure that all of the expected exit routines are 
listed in this message. 

Programmer Response: If any expected exit routines are not listed, the 
exits to be loaded must be link edited into an LPA library with the 
appropriate names. 

Problem Determination: None. 

ICH509I SYSRACF DD STATEMENT NOT SPECIFIED IN 

MSTRJCL OR ALLOCATION FAILURE FOR RACF 
DATA SET 

Explanation: There are two possible reasons for this message: 

1. RACF did not find SYSRACF (a DD statement) in MSTRJCL 
or the RACF data set in the data set name table. 

2. Dynamic allocation could not allocate the RACF data set. 
SYSRACF might be in the MSTRJCL but the RACF data set 
might not be cataloged in the proper volume. 

System Action: Message ICH502A follows this message. 

Operator Response: Notify the system programmer. 

Programmer Response: See problem determination. 
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Problem Determination: If SYSRACF has been removed from the 
MSTRJCL, check to see if the RACF data set has been placed in the 
data set name table. If not, correct the error and IPL again. 

If the SYSRACF DD statement is present in MSTRJCL.the RACF 
data set has been cataloged in the wrong volume. Recatalog 
SYSRACF and IPL again. 

ICH5 1 01 ALLOCATION FAILED FOR SPECIFIED RACF DATA 
_SET 



[{ 



PRIMARY) RACF DATA SET SEQUENCE nnn 
BACKUP / 



i, dsn I 



Explanation: The attempt to dynamically allocate the data set 
specified has failed. Message ICH502A follows this message. 

System Action: The system waits for the operator's reply. 

Operator Response: None. 

Programmer Response: None. 

Problem Determination: None. 

ICH5 1 1 1 RACF DETECTED AN ERROR IN THE CLASS 
DESCRIPTOR TABLE. ELEMENT xxx, ERROR 
CODE y 

Explanation: After locating the class descriptor table (ICHRRCDE) 
in the LPA, RACF ensures that each class name satisfies certain 
conditions. This message is issued to the operator when the table 
contains an error. This message is followed by message ICH501A. 
The index of the table entry in error is given by 'xxx'. The error code 
'y' identifies the problem, as follows: 

y Description of Error 

1 The class name is less than 4 characters or contains embedded 
blanks or non-alphanumeric characters. 

2 The ID field has a value of zero. 

3 The POSIT mask has more than one bit or no bits turned on. 

4 The MAXLNTH field has a value of zero or greater than 39. 

5 The class is designated as a grouping class but the MEMBER 
field does not contain a member class name. 

6 The table contains more than 255 entries. 

7 Two entries have class names whose first four characters are 
identical. 

8 A grouping or grouped class references a class not defined in the 
table. 

9 One of the reserved class names USER, GROUP, or DATASET 
appears in the class table. 

Note: A table containing no entries (that is, consisting of halfword 
zero) is acceptable. 

System Action: RACF becomes inactive and IPL continues. Even 
though RACF is inactive, it allows access to the following: 

• Started task resources 

• A user's own resources 

• Any other resources to which the operator allows access 

Operator Response: Ensure that the system parameters MLPA and 
LNK have been specified properly. If so, notify the system 
programmer. If not, correct any errors and IPL again. 

Programmer Response: Ensure that no errors occurred during the 
assembly of the table entries, that the table was properly link edited, 
and that modifications subsequent to link edit did not cause the error. 
Correct the error and IPL again. 



Problem Determination: If the system parameters MLPA and LNK 
have been specified properly, either RACF has not been installed 
properly, the MLPA and LNK lists do not contain all the entries 
required to ensure that all RACF-required modules are loaded into 
the link pack area, or there is an error in the link edit. 

ICH5 1 21 RACF UNABLE TO LOCATE modname IN LPA 

Explanation: There are two possible reasons for this message: (1) 
One of the routines ICHRAU00, ICHRID00, ICHRFC00, 
ICHREX00, ICHNRT00, or IGG019A9, the class descriptor table 
(ICHRRCDE), the range table (ICHRRNG), or started procedures 
table (ICHRIN03), which are required for RACF processing, could 
not be located in the link pack area. Processing cannot continue. 
This message is followed by message ICH50 II. (2) One of the 
routines ICHRFR00 or ICHRFR01 could not be located in the link 
pack area. Processing continues, but RACF cannot be invoked using 
the RACROUTE macro instruction. 

System Action: The system action depends on which of the two 
reasons is responsible for the message: (1) RACF becomes inactive 
and IPL continues: Even though RACF is inactive, it allows access 
to the following: 

• Started task resources 

• A user's own resources 

• Any other resources to which the operator allows access 

(2) IPL continues. 

Operator Response: Ensure that the system parameters MLPA and 
LNK have been specified properly. If so, notify the system 
programmer. 

Programmer Response: Correct the error and IPL again. 

Problem Determination: If the system parameters MLPA and LNK 
have been specified properly, either RACF has not been installed 
properly, the MLPA and LNK lists do not contain all the entries 
required to ensure that all RACF-required modules are loaded into 
the link pack area, or there is an error in the link edit of the above 
routines. 

ICH513I DATA SET NOT REFERENCED IN RANGE TABLE 
PRIMARY RACF DATA SET SEQUENCE nnn, dsn 

Explanation: There are no entries in the range table that would allow 
access to the data set indicated by 'dsn' with sequence number 'nnn'. 

System Action: The data set is not available to RACF. 

Operator Response: Notify the system programmer. 

Programmer Response: Check for a mismatch between the data set 
name table (ICHRDSNT) and the range table (ICHRRNG). 

Problem Determination: None 



ICH5 1 51 DATA SET ALREADY IN USE AS A RACF DATA SET. 
R PRIMARY^ RACF DATA SET SEQUENCE nnn 
HBACKUP J 



SET. 

, dsn I 



Explanation: The data set indicated by 'dsn' with sequence number 
'nnn' has already been allocated for use by RACF as a primary or 
backup data set. 

System Action: Message ICH502A follows this message. 
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Operator Response: Notify the system programmer. 

Programmer Response: See problem determination. 

Problem Determination: Ensure that the data set name table 
(ICHRDSNT) does not contain two entries with the same data set 
name. Also, ensure that the operator does not respond to message 
ICH502A with the name of a data set that already exists in the data 
set name table. 

ICH5 161 UNABLE TO ESTABLISH RECOVERY 

ENVIRONMENT, RACF INITIALIZATION 
CONTINUING 

Explanation: RACF issued an ESTAE macro instruction. A non-zero 
return code indicated that the system could not establish a recovery 
routine to get control if a RACF failure occurred. 

System Action: RACF processing continues without active error 
recovery. 

Operator Response: Notify the system programmer. 

Programmer Response: See Supervisor Services and Macro Instructions 
for information on return codes from an ESTAE macro instruction. 

Problem Determination: None. 

ICH5 1 71 ERROR IN RANGE TABLE 

Explanation: Either the operator entered the incorrect MLPA or LNK 
value or an entry in the range table is out of order. Message 
ICH501I follows this message. 

System Action: RACF becomes inactive and IPL continues. Even 
though RACF is inactive, it allows access to the following: 

• Started task resources 

• A user's own resources 

• Any other resources to which the operator allows access 

Operator Response: If the MLPA or LNK value was incorrect, 
correct it and IPL again. Otherwise, notify the system programmer 
of the error. 

Programmer Response: Ensure that the range table (ICHRRNG) was 

assembled and link edited correctly. If necessary, correct the order of 
the entries in the range table. IPL again. 

Problem Determination: The range table must contain at least one 
entry. The first entry must have a key of 44 binary zeroes, and the 
entries must appear with their keys in ascending order. 

ICH5 1 81 ERROR DURING INITIALIZATION OF RACF DATA 
SET 

Explanation: RACF unsuccessfully defined the user profile and/or 
groups to a new RACF data set. Message ICH501I follows this 

message. 

System Action: RACF becomes inactive and IPL continues. Even 
though RACF is inactive, it allows access to the following: 

• Started task resources 

• A user's own resources 

• Any other resources to which the operator allows access 

Operator Response: Notify the system programmer. 



Programmer Response: Re-initialize the new RACF data sets using 
ICHMINOO with PARM=NEW and IPL again. 

Problem Determination: The first time you IPL with RACF active, 
RACF generates a basic set of profiles. How these profiles are 
defined to each other is important. There should be one user profile 
(IBMUSER), and three group profiles (SYS1, SYSCATLG and 
VSAMDSET), the last two being subgroups of SYS1. IBMUSER 
must be connected to each of the three groups. 

ICH51 91 ERROR DURING UN ALLOCATION OF RACF DATA 
SET 

Explanation: There was an error during an attempt to allocate a 
RACF resource because RACF could not dynamically deallocate a 
data set specified in the data set name table or specified in a response 
to the operator. Message ICH501 A follows. 

System Action: RACF becomes inactive and IPL continues. Even 
though RACF is inactive, it allows access to the following: 

• Started task resources 

• A user's own resources 

• Any other resources to which the operator allows access 

Operator Response: Notify the system programmer. 

Programmer Response: Ensure that the data sets actually exist and 
reside on the DASD volume that is specified in the catalog entry of 
the data set. Correct the error and IPL again. 

Problem Determination: None. 

ICH520I RACF IS ACTIVE 

Explanation: RACF has been successfully initialized. 

System Action: IPL continues with RACF active. 

Operator Response: None. 

Programmer Response: None. 

Problem Determination: None. 

ICH52 1 1 GLOBAL ACCESS CHECKING BASE TABLE NOT 
OBTAINED, NO STORAGE AVAILABLE 

Explanation: The attempt to obtain storage from subpool 241 for the 
global profile base name table failed. 

System Action: RACF initialization continues, but global access 
checking is disabled. 

Operator Response: Notify the RACF administrator and the system 
programmer. 

Programmer Response: Check the amount of storage available for use 
with subpool 241 and, if necessary, increase the amount of CSA 
available. 

Problem Determination: None. 

ICH522I ERROR IN STARTED PROCEDURES TABLE 

Explanation: In the started procedures table, RACF found either a 
generic entry that was not the last entry or a generic entry that 
contains '=' in both the userid and group name fields. 
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System Action: RACF initialization continues, but the generic entry is 
ignored. 

Operator Response: Notify the system programmer. 

Programmer Response: Correct the started procedures table, and if 
necessary, IPL again. 

Problem Determination: None. 

RA CF Status Messages 

ICH701A CONFIRM CHANGE OF RACF STATUS 
JOB = jobname, USER = userid, 
REPLY YES OR NO 

Explanation: The RVARY command has been entered. The indicated 
'jobname' and 'userid' are those of the issuer of the RVARY 
command. This message is routed to the security console and the 
master console. 

System Action: RACF waits for a reply from the operator at the 
master console or the operator at the security console. 

Operator Response: Ensure that the request is made by an authorized 
person within your installation. If so, reply 'yes'; otherwise, reply 
'no'. 

Programmer Response: None. 

Problem Determination: None. 



RA CHECK Operator Messages 



ICH801I 



'accessor' ATTEMPTING 'access-type' ACCESS OF 
ENTITY 'name' 



Explanation: A RACHECK has been issued during a time when 
RACF processing is inactive. Even though RACF is inactive, it 
allows access to the following: 

• Started task resources 

• A user's own resources 

Any other resources to which the operator allows access 

This message provides a record of the accesses to RACF-protected 
resources during the period when RACF is inactive. 

The 'accessor' represents a userid, job name, or started task name. 
The 'access-type' represents the intended mode of system access 
(such as ALTER, CONTROL, UPDATE, or READ). The 'name' is a 
RACF profile name, such as a data set name or a volume serial 
number. 

System Action: If the accessor is a started task or a user accessing his 
own data set, RACF allows the access without operator intervention. 
If not, RACF issues message ICH802D requesting that the operator 
allow or deny the access. 

Operator Response: If RACF does not automatically allow the access, 
the following message ICH802D will ask the operator to allow the or 
deny access. 



Programmer Response: None. 

Problem Determination: None. 

| ICH802D REPLY Y OR N TO THE REQUEST 

Explanation: This message appears when RACF is inactive and a 
RACHECK is issued on a protected resource. It follows message 
ICH801I which asks the operator to decide if the requestor should be 
allowed access to the resource. 

System Action: The requesting task waits for the operator's reply. If 
the operator responds with 'N', the request is denied with, in some 
cases, an ABEND code. If the response is 'Y', the request is allowed, 
and processing continues. 

Operator Response: The preceding message ICH801I informs the 
operator about the resource being requested and the userid, job 
name, or started task name of the requestor. The operator uses the 
installation regulations to decide whether or not to allow the access. 

Programmer Response: None. 

Problem Determination: None. 

RACDEF Operator Messages 

ICH901I 'accessor' ATTEMPTING 'access-type' ACCESS OF 
ENTITY 'name' IN CLASS 'class-name' 
[NEW NAME 'new-name'] 

Explanation: RACF issued a RACDEF during a time when RACF 
processing was inactive. Even though RACF is inactive, it allows 
access to the following: 

• Started task resources 
A user's own resources 

• Any other resources to which the operator allows access 

This message informs the operator about a resource which RACF, in 
its inactive state, could not update in the RACF data set. 

The 'accessor' represents a userid, job name or started task name. 
The 'access-type' represents the intended mode of resource definition 
or update, such as DEFINE, ADDVOL, DELETE or CHGVOL. The 
'name' is a RACF profile name, such as a data set name or volume 
serial number. The 'class name' is one of the valid RACF class 
names. The 'new name' represents the new name of a data set being 
renamed. 

System Action: Processing continues with RACF inactive. 

Operator Response: Report this message to the system programmer 
and the RACF administrator. 

Programmer Response: After RACF is re-activated, determine the 
status of the specified resource in the RACF data set. If invalid, use 
the RACF commands to update the RACF data set. 

Problem Determination: None. 
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Chapter 2: Routing and Descriptor Codes 



This chapter lists the RACF system operator messages and the 
routing and descriptor codes for each. 

Refer to the publication OS/VS Message Library: VS2 Routing and 
Descriptor Codes for the explanation of the routing and descriptor 
codes shown here. 



RACF Messages (ICH) 



Descriptor 


Message 




Routing 


Code 


Identifier 


System 


Code 


4 


ICH301I 


VS2 


9 


2 


ICH302I 


VS2 


9 


4 


ICH401I 


VS2 


9,11 


4 


ICH402I 


VS2 


9 


4 


ICH403I 


VS2 


9 


4 


ICH404I 


VS2 


9 


4 


ICH405I 


VS2 


2,9,11 


4 


ICH406I 


VS2 


9,11 


4 


ICH407I 


VS2 


9,11 


4 


ICH408I 


VS2 


9,11 


1 


ICH409I 


VS2 


9,11 


4 


ICH410I 


VS2 


9 


4 


ICH500I 


VS2 


2 


4 


ICH501I 


VS2 


1 


2 


ICH502A 


VS2 


1 


4 


ICH503I 


VS2 


2 


4 


ICH504I 


VS2 


2 


1,2 


ICH505A 


VS2 


1 


4 


ICH506I 


VS2 


2 


4 


ICH508I 


VS2 


2,9 


4 


ICH509I 


VS2 


2 


4 


ICH510I 


VS2 


2 


4 


ICH511I 


VS2 


2 


4 


ICH512I 


VS2 


2 


4 


ICH513I 


VS2 


2 


4 


ICH515I 


VS2 


2 


4 


ICH516I 


VS2 


2 


4 


ICH517I 


VS2 


2 


4 


ICH518I 


VS2 


2 


4 


ICH519I 


VS2 


2 


4 


ICH520I 


VS2 


2 


4 


ICH521I 


VS2 


2 


4 


ICH522I 


VS2 


2 


4 


ICH602I 


VS2 


2,9 


2 


ICH701A 


VS2 


1,9 


4 


ICH801I 


VS2 


1,2,9,11 


2 


ICH802A 


VS2 


1,2,9,11 


4 


ICH901A 


VS2 


1,2,9,11 



Note: Routing code 9 indicates a message that is associated with 
security checking. 
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Chapter 3: RACF Data Set Initialization Messages 



This chapter lists the RACF data set initialization messages issued by 
RACF during the initialization of the RACF data set. The messages 
are routed to SYSOUT with the listings of the input images. 

The format of the messages is: 

ICH8nnn text 

Where: 

ICH identifies the message as a RACF message. 

8 identifies the RACF data set initialization program. 

nnn is the message serial number. 

ICH8000 MAXIMUM NUMBER OF TEMPLATE DEFINITIONS 
EXCEEDED 

Explanation: During initialization of the RACF data set, more than 
ten template definitions were found on the control card input from 
the data set defined by the SYSTEMP DD statement. 

System Action: Initialization of the RACF data set terminates. 

Operator Response: Notify the system programmer. 

Programmer Response: Ensure that no more than ten template 
definitions exist in the data set defined by the SYSTEMP DD 
statement. Rerun the program. 

Problem Determination: List the contents of the data set defined by 
the SYSTEMP DD statement to determine the problem. 

ICH8001 TEMPLATE IS A DUPLICATE, IT IS IGNORED 

Explanation: During initialization of the RACF data set, two template 
definitions were found in the data set defined by the SYSTEMP DD 
statement with the same template number. 

System Action: Initialization of the RACF data set continues using 
the first definition of the duplicate pair. 

Operator Response: Notify the system programmer. 

Programmer Response: If the second definition of the duplicate pair is 
the correct definition, delete the first definition and rerun the 
program. 

Problem Determination: List the contents of the data set defined by 
the SYSTEMP DD statement to determine the problem. The 
template number of the duplicate template is contained in the data 
statement listed before this message. 

ICH8002 RACF DATA SET INITIALIZATION COMPLETE 

Explanation: The RACF data set has been successfully initialized. 
System Action: Processing continues. 
Operator Response: None. 
Programmer Response: None. 



Problem Determination: None. 

ICH8003 NON-NUMERIC CHARACTER FOUND IN NUMERIC 
FIELD OF LAST STATEMENT 

Explanation: During the initialization of the RACF data set, an 
invalid character was found in a numeric field of the previous input 
statement. 

System Action: Initialization of the RACF data set terminates. 

Operator Response: Notify the system programmer. 

Programmer Response: Ensure there are valid characters in the 
numeric fields and rerun the program. 

Problem Determination: List the contents of the data set defined by 
the SYSTEMP DD statement to determine the problem. 

ICH8004 RACF DATA SET INITIALIZATION TERMINATED 

Explanation: Initialization of the RACF data set has failed (as noted 
by a previous message). 

System Action: Initialization of the RACF data set is terminated. 

Operator Response: None. 

Programmer Response: None. 

Problem Determination: None. 

ICH8005 RACF DATA SET INITIALIZATION PROCESSING 

Explanation: Initialization of the RACF data set has begun and 
template definitions will follow. 

System Action: Processing continues. 

Operator Response: None. 

Programmer Response: None. 

Problem Determination: None. 

ICH8006 UNABLE TO OPEN [SYSRACF, SYSTEMPj 

Explanation: The data set associated with the indicated DD name 
could not be opened. 

System Action: Initialization of the RACF data set terminates. 

Operator Response: Notify the system programmer. 

Programmer Response: Ensure that the DD statement for the 
indicated data set is correct. 

Problem Determination: None. 

ICH8007 END OF FILE OCCURRED BEFORE $/END 
STATEMENT ENCOUNTERED 

Explanation: During the initialization of the RACF data set, an 
end-of-file condition was detected on the data set defined by the 
SYSTEMP DD statement before a $/END statement. 
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System Action: Initialization of the RACF data set continues. 

Operator Response: Notify the system programmer. 

Programmer Response: Verify the contents of ICHTEMPO. If more 
template definitions were expected, the program must be rerun with 
the complete set of template definitions as input. If all template 
definitions are present and only the $/END statement is missing, the 
program need not be rerun. 

Problem Determination: List the contents of the data set defined by 
the SYSTEMP DD statement to determine the required templates. 

ICH8008 END OF FILE REACHED BEFORE END OF 
TEMPLATE DEFINITION 

Explanation: In attempting to initialize the RACF data set, one of the 
following conditions was encountered: (1) An end-of-file was 
reached before a $ /TEMPLATE statement was found, or (2) An 
end-of-file was reached immediately after a $/TEMPLATE 
statement but with no intervening field definitions. 

System Action: The RACF data set is not initialized. 

Operator Response: Notify the system programmer. 

Programmer Response: Correct ICHTEMPO and rerun the program. 

Problem Determination: List the contents of the data set defined by 
the SYSTEMP DD statement to verify the correct definitions. 

ICH8009 TEMPLATE DEFINITION MISSING 

Explanation: In attempting to initialize the RACF data set, a $/END 
or $/TEMPLATE statement was found immediately following a 
$/TEMPLATE statement in ICHTEMPO. The expected field 
definitions were not found. 

System Action: The RACF data set is not initialized. 

Operator Response: Notify the system programmer. 

Programmer Response: Correct ICHTEMPO and rerun the program. 

Problem Determination: List the contents of the data set defined by 
the SYSTEMP DD statement to verify the definitions. 

ICH8010 INVALID PARM parameter-value 

Explanation: The indicated 'parameter-value' is not a valid value for 
the NEW or UPDATE parameter. Only the first nine characters of 
the parameter-value are listed. 

System Action: Updating of the RACF data set is terminated. 

Operator Response: Notify the system programmer. 

Programmer Response: Correct the value specified on the NEW or 
UPDATE parameter and rerun the program. 

Problem Determination: None. 



ICH801 1 UNABLE TO RETRIEVE DATASET NAME 

Explanation: While attempting to retrieve the data set name allocated 
via the SYSRACF DD statement, an error was encountered from the 
SVC 99 information retrieval function. 

System Action: Updating of the RACF data set is terminated. 

Operator Response: Notify the system programmer. 

Programmer Response: Correct the SYSRACF DD statement and 
rerun the program. 

Problem Determination: None. 

ICH8012 RACF DATA SET HEADER RECORD INVALID 

Explanation: The RACF data set initialization program found an 
invalid ICB (header) record in the RACF data set while preparing to 
update the RACF data set. 

System Action: Updating of the RACF data set is terminated. 

Operator Response: Notify the system programmer. 

Programmer Response: If the RACF data set was not previously 
formatted via this program with the PARM='NEW' specification, 
then rerun the program with PARM = 'NEW'. If the RACF data set 
is a version 1, release 1 or 2 data set that is being updated, then run 
the RACF data set verification utility program (ICHUT200) to 
determine which ICB field is in error. 

Problem Determination: The validity check which caused the failure 
can result from an invalid ICB value for the number of templates or 
BAMs, or an invalid RBA. List the contents of the data set defined 
by the SYSRACF DD statement to determine the problem. 

ICH8013 RACF DATA SET UPDATES COMPLETE 

Explanation: The template update function of the RACF data set 
initialization program has completed successfully. 

System Action: Processing continues. 

Operator Response: None. 

Programmer Response: None. 

Problem Determination: None. 

ICH8014 RACF DATASET UPDATES TERMINATED 

Explanation: The template update function of the RACF data set 
initialization program has terminated unsuccessfully as noted in a 
previous message. 

System Action: Updating of the RACF data set is terminated. 

Operator Response: Notify the system programmer. 

Programmer Response: Respond to the previous message and rerun 
the program. 

Problem Determination: None. 
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Chapter 4: RACF Command Messages 



This chapter lists the command messages issued by RACF during the 
processing of the RACF commands. These messages are routed to 
the command issuer. See the topic "Recovery Procedures" in the 
RACF Installation Reference Manual for procedures to recover from 
errors that occur during the processing of the RACF commands. 

The format of the command messages is: 

ICHxxnnnt text 

Where: 

ICH identifies the message as a RACF message. 

xx is the command processor issuing the message. 

nnn is the message serial number. 

t t is the type code, I=information, A=action. 

Where the xx field identifies the command processor as: 



xx 

ICHOOnnnt 
ICHOlnnnt 
ICH02nnnt 
ICH03nnnt 
ICH04nnnt 
ICH05nnnt 
ICH06nnnt 
ICHOSnnnt 
ICH09nnnt 
ICHlOnnnt 
ICHllnnnt 
ICH12nnnt 
ICH13nnnt 
ICHHnnnt 
ICH15nnnt 
ICH20nnnt 
ICH21nnnt 
ICH22nnnt 
ICH30nnnt 
ICH31nnnt 
ICH32nnnt 
ICH35nnnt 



Command 

ADDGROUP 

ADDUSER 

CONNECT 

REMOVE 

DELUSER 

DELGROUP 

PERMIT 

PASSWORD 

ADDSD and DELDSD 

RDEFINE 

RALTER 

RDELETE 

RLIST 

SETROPTS 

RVARY 

ALTGROUP 

ALTUSER 

ALTDSD 

LISTUSER 

SEARCH 

LISTGRP 

LISTDSD 



ADDGROUP Command Messages 

ICH00002I NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the ADDGROUP 
command, or RACF is not active. The command is terminated. 

ICH00003I UNABLE TO ACCESS groupname 

RACF could not find the description of the specified superior group. 
The command is terminated. 

ICH00004I COMMAND ENDED DUE TO ERROR 

An ESTAE environment could not be established. The command is 
terminated. 



ICH00005I RECOVERY UNSUCCESSFUL 

Backout was attempted, but the problem could not be corrected. The 
RACF utility programs may be needed to correct the RACF data set. 
This message follows ICH00006I. 

ICH00006I (group-name [AND REMAINING GROUPS] NOT) 
/ADDED > 

(gROUP(S) NOT ADDED ) 

Group 'group-name' and all succeeding groups were not added. 

ICH00007I INSUFFICIENT AUTHORITY TO SUPERIOR 
GROUP 

You do not have sufficient authority to issue the ADDGROUP 
command. The command is terminated. 

ICH00008I OWNER-GROUP AND SUPERIOR GROUP MUST 
BE THE SAME 

When the owner of a group is another group, the owning group and 
the superior group must be the same. The command is terminated. 

ADDUSER Command Messages 

ICHO 1 00 1 1 NOT AUTHORIZED TO SPECIFY I AUDITOR, 

OPERATIONS, SPECIAL], OPERAND IGNORED 

You do not have sufficient authority to specify the keywords shown. 
The command continues with the attributes NOOPERATIONS, 
NOSPECIAL, or NOAUDITOR. 

ICHO 10021 NOPASSWORD OPERAND IGNORED 

You specified the NOPASSWORD operand but did not specify the 
OIDCARD operand. A user must have either a password or operator 
identification card specified. Therefore, the NOPASSWORD 
operand is ignored and the user is assigned the default password. 

ICHO 10031 NOT AUTHORIZED TO SPECIFY CLAUTH FOR 

ITAPEVOL, USER, DASDVOL, TERMINAL], CLASS 
IGNORED 

You do not have sufficient authority to specify CLAUTH for the 
indicated class. Command processing ignores this class and continues 
with the next class or operand. 

ICHO 1004 A ENTER OPERATOR IDENTIFICATION CARD 

You have specified the OIDCARD operand. This message is 
requesting that you enter the operator identification card for the user 
being defined so that the information on it can be put into the user 
profile. Command processing waits tor you to enter the operator 
identification card. 

ICH01 0051 NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the ADDUSER 
command, or RACF is not active. The command is terminated. 
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ICH01006I 
ICH01006I 



COMMAND ENDED DUE TO ERROR + 
TERMINAL TYPE NOT SUPPORTED 



You specified the OIDCARD operand, but when the operator 
identification card was entered, it could not be verified because it was 
entered on a terminal that is not supported. The command is 
terminated. 



ICH01007I 
ICH01007I 



COMMAND ENDED DUE TO ERROR + 
UNABLE TO PROMPT FOR OIDCARD 



You specified the OIDCARD operand, but TSO was unable to 
prompt you to enter the operator identification card. Be sure you are 
executing the command in the foreground and in prompt mode. 



ICH01008I 
ICH01008I 



COMMAND ENDED DUE TO ERROR + 
UNABLE TO ESTABLISH ESTAE 



An ESTAE environment could not be established. The command is 
terminated. 

ICH01009I RECOVERY UNSUCCESSFUL 

Backout was attempted, but the problem could not be corrected. The 
RACF utility programs may be needed to correct the RACF data set. 
This message follows message ICH01010I. 

ICH01010I (userid [AND REMAINING USERS) NOT ADDED* 
^USER(S) NOT ADDED ( 

User 'userid' and all succeeding users were not added. 

ICHO 1 1 1 1 INSUFFICIENT AUTHORITY 

You do not have sufficient authority to issue the ADDUSER 
command. The command is terminated. 



ICH010I2I 
ICH01012I 



COMMAND ENDED DUE TO ERROR + 
PUTGET ERROR RETURN CODE IS xx 



ICH02004I INSUFFICIENT AUTHORITY TO GROUP 

You do not have sufficient authority to issue the CONNECT 
command. The command is terminated. 

ICH02005I userid CONNECTION NOT MODIFIED 

The indicated 'userid' was found in the group's access list but either 
no connect profile was found or an error occurred while attempting 
to modify the connect profile. Command processing continues with 
the next userid in the list. 

ICH02006I NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the CONNECT 
command, or RACF is not active. The command is terminated. 

ICH02007I NOT AUTHORIZED TO SPECIFY [SPECIAL, 

OPERATIONS AUDITOR), OPERAND IGNORED 

You do not have sufficient authority to specify the operand indicated. 
The operand is ignored and command processing continues with the 
next operand. 



ICH02008I 



AUTHORITY SPECIFIED GREATER THAN THE 
COMMAND USER 



You have specified a group authority on the AUTHORITY operand 
of the CONNECT command that is greater than your own. The 
command is terminated. 

ICH02009I NOT AUTHORIZED TO ALTER userid TO 

[NOSPECIAL, NOOPERATIONS NOAUDITOR] 

You do not have sufficient authority to specify the operand indicated 
for 'userid'. The operand is ignored and command processing 
continues with the next operand. 

ICH020 1 01 AUTHORITY NOT ALTERED FOR userid 



You specified the OIDCARD operand, but the TSO PUTGET 
service routine failed with a return code of 'xx' while trying to read 
the operator identification card. For an explanation of the return 
code, refer to OS/VS2 TSO Guide to Writing a Terminal Monitor 
Program or a Command Processor, GC28-0648. 

CONNECT Command Messages 

ICH02001I COMMAND ENDED DUE TO ERROR 



You specified the AUTHORITY operand but an error occurred while 
attempting to modify the group authority field in the group profile for 
the indicated 'userid'. Command processing continues with the next 
operand. 



ICH02011I 



OWNER SPECIFIED IS NOT A RACF DEFINED 
USER OR GROUP 



The userid or group name specified on the OWNER operand is not 
defined to RACF. The command is terminated. 



An ESTAE environment could not be established. The command is 
terminated. 

ICH02002I RECOVERY UNSUCCESSFUL 



REMOVE Command Messages 

ICH03002I userid WAS NOT CONNECTED TO GROUP 



Backout was attempted, but the problem could not be corrected. The 
RACF utility programs may be needed to correct the RACF data set. 
This message follows message ICH02003I. 

ICH02003I (userid [AND REMAINING USERS) NOT) 
^CONNECTED > 

( USER(S) NOT CONNECTED J 

User 'userid' and all succeeding users were not connected because of 
an error in RACF processing. 



The user indicated by 'userid' was not connected to the group so no 
processing could be done for the user. Command processing 
continues with the next userid in the list. 

ICH03003I INSUFFICIENT AUTHORITY TO GROUP, NO 
USERS REMOVED 

You do not have sufficient authority to issue the REMOVE 
command. The command is terminated. 
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ICH03004I COMMAND ENDED DUE TO ERROR 



DELUSER Command Messages 



An ESTAE environment could not be established. The command is 
terminated. 



ICH03005I 



userid CANNOT BE NEW OWNER AS USER WAS 
SPECIFIED TO BE REMOVED 



The indicated 'userid' was specified in the OWNER operand but is 
the same userid that was specified to be removed. Only those userids 
specified that do not own group data sets are removed. 

ICH03006I (userid [AND REMAINING USERS] NOT REMOVED^ 
^USER(S) NOT REMOVED f 

User 'userid' was not removed. If this message follows ICH03004I, 
then no further users are removed. 



ICH03007I 



SOME GROUP DATA SET OWNERS WERE 
CHANGED 



The command did not complete successfully. An error was detected 
while removing the user specified in message ICH03006I. Some of 
the group data sets owned by the user were modified to reflect the 
new owner. This was not completed. Use the LISTDSD command to 
determine the status of the group data sets. 

ICH03008I NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the REMOVE 
command, or RACF is not active. The command is terminated. 

ICH03014I group-name IS DEFAULT GROUP, userid NOT 
REMOVED 

A user cannot be removed from the default group. Respecify the 
group name or use the DELUSER command to remove the user from 
the default group. 



ICH03021I 



OWNER REQUIRED FOR GROUP DATA SETS, 
userid NOT REMOVED 



User 'userid' is the owner of group data sets and cannot be removed 
because another owner was not specified or was invalid. The 
command continues with the next userid. 



ICH03025I 



OWNER SPECIFIED NOT CONNECTED TO 
GROUP 



The owner specified on the command is not connected to the group. 
If any 'userid' specified to be removed owns group data sets, message 
ICH03021I will be issued. The command continues with the next 
userid. 

ICH03026I INSTALLATION EXIT FAILED REMOVE 
REQUEST FOR userid 

The command pre-processing installation exit routine ICHCCXOO 
issued a return code of 8, indicating that RACF should fail the 
REMOVE request for the specified 'userid'. Processing of the 
REMOVE command continues with the next userid specified. 
Report this message to the system programmer. 



ICH0400 1 1 ERROR LOCATING userid 

User 'userid' is not defined in the RACF data set. Command 
processing continues with the next user. 

ICH04002I ERROR DELETING userid 

An error occurred while deleting user 'userid'. The user profile may 
be in an inconsistent state. Command processing continues with the 
next user specified. 

ICH04004I COMMAND ENDED DUE TO ERROR 

An ESTAE environment could not be established. The command is 
terminated. 

ICH04006I (userid [AND REMAINING USERS] NOT DELETED^ 
(USER(S) NOT DELETED J 

User 'userid' was not removed due to an error in command 
processing. Succeeding users may not have been removed, depending 
on the type of error. 

ICH04009I userid CANNOT BE DELETED, DATA SETS STILL 
EXIST 

User 'userid' was not deleted from the RACF data set because the 
user is still defined as owner of user data sets. The user's data sets 
must be deleted before the user can be removed. Command 
processing continues with the next user. 

ICH040 1 01 NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the DELUSER 
command, or RACF is not active. The command is terminated. 

ICH040 1 1 1 INSTALLATION EXIT FAILED DELETE REQUEST 
FOR userid 

The command pre-processing installation exit routine ICHCCXOO 
issued a return code of 8, indicating that RACF should fail the 
DELUSER request for the specified 'userid'. Processing of the 
DELUSER command continues with the next userid specified. 
Report this message to the system programmer. 

DELGROUP Command Messages 

ICH05001I ERROR LOCATING group-name 

The specified group name is not defined in the RACF data set. 
Command processing continues with the next group. 

ICH05002I COMMAND ENDED DUE TO ERROR 

An ESTAE environment could not be established. The command is 
terminated. 



ICH05004I (group-name [AND REMAINING GROUPS] NOT 
^DELETED 
(GROUP(S) NOT DELETED 

Group 'group-name' and all succeeding groups were not deleted. 
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ICH05005I NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the DELGROUP 
command, or RACF is not active. The command is terminated. 

ICH05006I group-name CANNOT BE DELETED, GROUP DATA 
SETS STILL DEFINED TO RACF 

Group 'group-name' was not deleted from the RACF data set 
because there are still group data sets associated with the group. A 
group cannot be deleted until RACF-protection is removed from the 
group data sets with the DELDSD command. Command processing 
continues with the next group. 

ICH05007I INSTALLATION EXIT FAILED DELETE REQUEST 
FOR group-name 

The command pre-processing installation exit routine ICHCNXOO 
issued a return code of 8, indicating that RACF should fail the 
DELUSER request for the specified 'group-name'. Processing of the 
DELUSER command continues with the next group-name specified. 
Report this message to the system programmer. 

PERMIT Command Messages 

ICH0600 1 1 name ALREADY AUTHORIZED TO RESOURCE - 
ACCESS UNCHANGED 

The 'name' (userid or group name) in the FROM resource's access 
list is already on the access list of the TO resource. Command 
processing continues with the next name in the FROM resource's 
access list. 

ICH06002I name NOT AUTHORIZED, DELETE IGNORED 

The 'name' (userid or group) is not on the access list of the specified 
resource and the delete is ignored. Command processing continues 
with the next option. 

ICH06003I NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the PERMIT 
command, or RACF is not active. The command is terminated. 

ICH06004I entity-name NOT DEFINED TO RACF 

The specified resource name 'entity-name' is not defined to RACF. 

ICH06005I COMMAND ENDED DUE TO ERROR 

A RACF manager error occurred. This message is accompanied by a 
message explaining the error. 

ICH06006I NOT AUTHORIZED TO entity-name 

You are not authorized to alter or copy the access list of the entity 
'entity-name'. 

ICH06007I name NOT DEFINED TO RACF 

The specified 'name' (userid or group name) is not defined to RACF 
and cannot be authorized access to the resource. Command 
processing continues with the next 'name'. 



ICH06008I INSTALLATION EXIT FAILED PERMIT REQUEST 
FOR data-set-name 

The command pre-processing installation exit routine ICHCNXOO 
issued a return code of 4, indicating that RACF should fail the 
PERMIT request for the specified 'data-set-name'. If 
'data-set-name' is the name of the data set whose access list you want 
to modify, the command terminates. If 'data-set-name' is the name 
of the data set whose access list you want to copy (as specified on the 
FROM operand), only processing of the PERMIT command 
associated with the ID operand is performed. Report this message to 
the system programmer. 

ICH06009I RESET OPTION IGNORED, CONFLICTS WITH 
DELETE REQUEST 

Both the DELETE and the RESET options were specified. The 
DELETE option is accepted, and the RESET option is ignored. 

ICH0601M {GENERIC | FGENERIQ INVALID, GENERIC 
COMMAND PROCESSING IS INACTIVE. 

Because the generic command processing facility is inactive, the 
GENERIC and FGENERIC operands are invalid. Command 
processing terminates. 

PASSWORD Command Messages 

ICH0800 1 1 userid NOT DEFINED TO RACF 

The user 'userid' was not found in the RACF data set. No processing 
is done. 

ICH08002I NEW PASSWORD CANNOT EQUAL CURRENT 
PASSWORD 

The new password specified must be different than the current 
password. The password is not changed. 

ICH08003I INTERVAL NOT IN RANGE 1 -nnn 

The password change-interval must be greater than and less than 
'nnn' which is the installation-specified maximum. The interval is not 
changed. 

ICH08004I COMMAND ENDED DUE TO ERROR 

A RACF manager error occurred. This message is accompanied by a 
message explaining the error. 

ICH08005I VALUE SPECIFIED IS NOT CURRENT 
PASSWORD 

You have specified an invalid current password. The password is not 
changed. 

ICH08006I NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the PASSWORD 
command, or RACF is not active. The command is terminated. 

ICH08007I NOT AUTHORIZED TO CHANGE 
PASSWORD/INTERVAL FOR userid 

You cannot change a password or a password interval unless it is 
your own password or reset a password unless you have the 
SPECIAL attribute. The password is not changed. 
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ICH08008I userid NOT DEFINED TO USE A PASSWORD 

The specified user 'userid' is defined to RACF but does not require a 
password to enter the system. No command processing is performed. 

ICH08009I PASSWORD OPERAND IGNORED 

You specified the PASSWORD operand with the USER operand. In 
this case, only the USER operand is processed. The PASSWORD 
operand is ignored. 

ICH080 1 01 INTERVAL CHANGE FOR 'id' REJECTED BY 

This is the first part of a two-part message that indicates that the 
installation password exit (ICHPWX01) has rejected the value you 
specified in the INTERVAL keyword (in the PASSWORD 
command). Consult your local administrator for the rules for 
INTERVAL values. The command is terminated. 

Message ICH08012I follows this message. 

ICH080 1 1 1 PASSWORD CHANGE FOR 'id' REJECTED BY 

This is the first part of a two-part message that indicates that the 
installation password exit (ICHPWX01) has rejected the character 
string you specified on the PASSWORD keyword (on the 
PASSWORD command). Consult your local administrator for the 
rules regarding new passwords. The command is terminated. 

Message ICH08012I follows this message. 

ICH080 1 21 INSTALLATION PASSWORD EXIT 

This message completes messages ICH08010I, ICH081 II and 
ICH08013I. Each of these messages is split because some console 
screens cannot accommodate the complete message. 



ICH08013I 



PASSWORD AND INTERVAL CHANGES FOR id 
REJECTED BY 



This is the first of a two-part message that indicates that the 
installation password exit (ICHPWX01) has rejected the values you 
specified in both the INTERVAL and PASSWORD keywords (on 
the PASSWORD command). Consult your local administrator for the 
rules for interval values and new PASSWORDS. The command is 
terminated. Message ICH08012I follows this message. 



ICH08014I 



PASSWORD CHANGE REJECTED BY 
INSTALLATION SYNTAX RULES 



You specified a potential password that does not obey the syntax 
rules (specified by the PASSWORD keyword on the SETROPTS 
command) in effect for your installation. Consult your local 
administrator for the syntax rules for new passwords. The command 
is terminated. 



ICH08015I 



NEW PASSWORD MATCHES A PREVIOUS 
PASSWORD FOR YOU 



You specified a password that matches one you previously specified. 
The command terminates. Consult your local administrator for 
password HISTORY options set by the SETROPTS command. 



ADDSD andDELDSD Command Messages 

ICH09000I NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the ADDSD or 
DELDSD commands, or RACF is not active. The command is 
terminated. 

ICH09001I UNABLE TO ESTABLISH ESTAE 

The command processor was unable to establish an ESTAE recovery 
environment. The command is terminated. 

ICH09002I NOT AUTHORIZED TO CREATE GROUP DATA 
SETS FOR GROUP group-name 

You do not have sufficient authority to create group data sets. 
Processing continues with the next data set. 

ICH09004I data-set-name ALREADY DEFINED TO RACF 

The specified data set 'data-set-name' was found in the RACF data 
set. The definition is not changed. Processing continues with the 
next data set. 

ICH09005I data-set-name NOT FOUND (ON volumeJN 
CATALOG) 

The specified non-VSAM data set 'data-set-name' was not found on 
the indicated 'volume'. Or, the specified VSAM or non-VSAM data 
set 'data-set-name' was not found by a catalog search. If the data set 
was not found on a particular volume, the command processor 
attempts to process the data set on any remaining volumes. If the 
data set cannot be found in the catalog, processing continues with the 
next data set. 

ICH09006I USER OR GROUP name NOT DEFINED TO RACF 

The userid or group name 'name' specified as the first-level qualifier 
of the data set name could not be found on the RACF data set. To 
protect a data set with RACF, the first-level qualifier of the data set 
name must be a RACF-defined userid or group name. Processing 
continues with the next data set. 



ICH09007I 



OWNER SPECIFIED IS NOT A RACF DEFINED 
USER OR GROUP 



The userid or group name specified on the OWNER operand is not 
defined to RACF. The command terminates. 

ICH09008I VOLUME INFORMATION IN RACF PROFILE 
INCONSISTENT WITH CATALOG VOLUME 
INFORMATION 

In processing a request to delete RACF protection for a VSAM data 
set, RACF found that the volume serial number in the data set profile 
does not match the volume serial number in the containing catalog. 
The command is terminated. Ust the Access Method Services 
LISTCAT command and the RACF LISTDSD command to locate 
the inconsistency. Processing continues with the next data set. 



ICH09009I 



OWNER SPECIFIED HAS INSUFFICIENT 
AUTHORITY TO GROUP 



For a group data set, the userid specified on the OWNER operand 
does not have group authority to the group and cannot be named the 
owner of the group data set. 
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ICH09010I NOT AUTHORIZED TO SPECIFY NOSET 

To specify NOSET, your userid must match the first-level qualifier of 
the data set name, you must have the SPECIAL attribute, or the data 
set profile is in a group in which you have the group-SPECIAL 
attribute. Processing continues with the next data set. 



ICH09011I 



NOT AUTHORIZED TO DELETE RACF 
PROTECTION FOR data-set-name 



ICH09019I 



data-set-name [ON volume] - RACF INDICATOR 
INCONSISTENT WITH DATA SET PROFILE 



RACF protection was partially added or deleted for the specified 
data set 'data-set-name'. The RACF indicator was processed 
successfully in the VSAM catalog entry or in the DSCB on volume 
'volume', but the associated data set profile on the RACF data set 
was not successfully processed. Processing continues with the next 
data set. 



You do not have sufficient access authority to delete RACF 
protection for the data set specified. Processing continues with the 
next data set. 



ICH09012I 



data-set-name [ON volume) ALREADY RACF 
INDICATED 



While attempting to RACF indicate the data set identified by 
'data-set-name', the command processor found that the data set was 
already RACF-indicated in the VSAM catalog for a VSAM data set 
or in the DSCB on the volume indicated by 'volume' for a 
non-VSAM data set. Processing continues with the next data set. 



ICH09013I 



data-set-name [ON volume] IS NOT RACF 
INDICATED 



While attempting to remove RACF indication for the specified data 
set, the command processor found that the data set was not 
RACF-indicated in the VSAM catalog for a VSAM data set or in the 
DSCB on the volume indicated for a non-VSAM data set. Processing 
continues with the next data set. 



ICH09014I 



INCOMPLETE UNIT/VOLUME INFORMATION 
SPECIFIED 



Either unit or volume information was specified, but not both. If the 
data set is cataloged, do not specify unit or volume. If the data set is 
not cataloged, specify both unit and volume. The command is 
terminated. 

ICH090 151 I/O ERROR ON OBTAIN ON VOLUME volume 

An OBTAIN issued for the data set on the volume indicated resulted 
in an error return code. The command terminates. 



ICH09016I 



VSAM CATALOG RETURN CODE IS 
re - REASON CODE IS IGGOCLaa - crs 



The return code 're' and reason code 'crs' were returned by the 
catalog management module IGGOCLaa as a result of a catalog error 
or exceptional condition. Refer to the description of message 
IDC3009I for meanings of return codes and reason codes. (See 
OS/VS Message Library: VS2 System Messages.) Processing continues 
with the next data set. 



ICH09017I 



I/O ERROR PROCESSING VTOC ON VOLUME 
volume 



An I/O error occurred while reading or writing a DSCB to the 
volume indicated. The command terminates. 



ICH09020I data-set-name NOT DEFINED TO RACF 

The data set profile for data set 'data-set-name' was not found on the 
RACF data set. Processing continues with the next data set. 

ICH09021I data-set-name [ON volume] [AND REMAINING 
VOLUMES] NOT PROCESSED 

RACF processing was not successful for the specified data set 
'data-set-name'. For non-VSAM data sets, RACF processing was not 
successful on the volume 'volume'. The phrase [AND REMAINING 
VOLUMES] denotes that all volumes sequentially after the indicated 
volume in the catalog entry for the data set or in the VOL list 
specified on the command were not processed. 



ICH09022I 



COMMAND PROCESSOR ENCOUNTERED 
SYSTEM ERROR 



The 'RDJFCB' function failed during the processing of the RACF 
indicator for a volume of a non-VSAM data set. 



ICH09023I 



data-set-name - LAST VOLUME ADDED TO DATA 
SET PROFILE WAS volume 



During processing of the ADDSD command with the NOSET option 
specified, an error occurred while adding volume serials to the newly 
created data set profile on the RACF data set. The volume indicated 
by 'volume' was the last volume added before the terminating error. 
Use the ADD VOL operand of the ALTDSD command to add the 
remaining volumes. 

ICH09024I data-set-name INVALID DATA SET NAME 

The data set 'data-set-name' is not a valid qualified name or the first 
qualifier exceeded the maximum allowed length of eight characters. 
Processing continues with the next data set. 



ICH09025I 



NOT AUTHORIZED TO RACF PROTECT 

data-set-name 



You are not authorized to RACF protect the data set 
'data-set-name'. To protect a user data set, the first-level qualifier of 
the data set name must match your userid or you must have the 
SPECIAL attribute or the data set profile is in a group in which you 
have the group-SPECIAL attribute. The command terminates. 

ICH09026I data-set-name HAS DUPLICATE VOLUME SERIALS 

The same volume serial was found twice in the list of volume serials 
for the data set 'data-set-name'. No volumes are processed and the 
command terminates. 



ICH090 1 81 OPEN FAILED ON VOLUME volume 



ICH09027I data-set-name IN USE - TRY AGAIN LATER 



An OPEN failed for the data set to be protected or for the VTOC 
data set on the volume indicated. The command terminates. 



For the VSAM data set 'data-set-name', the catalog entry containing 
the RACF indicator cannot be modified because the data set 
specified is in use. Processing continues with the next data set. 
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ICH09028I INSTALLATION EXIT FAILED |DEFINE,DELETE1 
REQUEST FOR data-set-name 

The command pre-processing installation exit routine ICHCNXOO 
issued a return code of 4, indicating that RACF should fail the 
ADDSD or DELDSD request for the specified 'data-set-name'. The 
command terminates. Report this message to the system 
programmer. 

ICH09029I ERROR ENCOUNTERED DURING VTOC ACCESS, 
RETURN CODE IS xx, CVSTAT IS yyy. 

The Common VTOC Access Facility (CVAF) issued a non-zero 
return code, indicating that the VTOC update operation did not 
complete successfully. The 'xx' value (the contents of register 15 
from a CVAF invocation) and the 'yyy' value (CVSTAT) are 
documented in Data Facility Device Support Users Guide and 
Reference, (SC28-3952). 



ICH09034I 



GENERIC INVALID, GENERIC COMMAND 
PROCESSING IS INACTIVE 



Because the generic command processing facility is inactive, the 
GENERIC operand is invalid. Command processing terminates. 

RDEFINE Command Messages 

ICH 1 00041 operand DOES NOT APPLY TO class-name CLASS 
ENTITIES; OPERAND IGNORED 

The indicated 'operand' does not apply to the class 'class-name'. The 
operand is ignored and processing continues with the next operand. 



ICH10005I 



LIST OF ENTITY NAMES SPECIFIED; ADDMEM 
OPERAND IGNORED 



When the class-name is specified as GLOBAL and the ADDMEM 
operand is specified, only a single entity name is allowed, but a list of 
entity names was given. The ADDMEM operand is ignored and 
processing continues with the next operand. 



ICH10202I NOT AUTHORIZED TO DEFINE class-name CLASS 
ENTITIES 

You do not have sufficient authority to define entities to RACF in 
the indicated class 'class-name'. The command is terminated. 

ICH 1 030 1 1 entity-name AND REMAINING ENTITIES NOT 
DEFINED TO RACF 

The indicated 'entity-name' and remaining entity names in the list 
were not defined to RACF because of one of the following: 

• A RACF manager error occurred. In this case, the message is 
preceded by a RACF manager error message explaining the 
error. 

• A system error occurred while building in-storage profiles (via 
RACLIST) for the indicated 'entity-name'. 

• A system error occurred while checking (via FRACHECK) the 
user's authority to the entities to be defined. 

• A system error occurred while building in-storage profiles (via 
RACLIST) for the entity names specified by the ADDMEM 
operand or the member class associated with the specified class 
is currently inactive. 

• A system error occurred while checking (via FRACHECK) the 
user's authority to the entities specified by the ADDMEM 
operand. 

• A user with class authority (CLAUTH) but without the 
SPECIAL attribute attempted to define an entity in a general 
resource class (for example, TIMS) while the class was not 
active. 

RALTER Command Messages 

ICH 1 1 00 1 1 NOT AUTHORIZED TO SPECIFY GLOB ALAUDIT 
FOR 'entity-name'; OPERAND IGNORED 



ICH10102I 



entity-name ALREADY DEFINED TO CLASS 
class-name 



The indicated 'entity-name' has been previously defined to RACF in 
the class 'class-name'. Command processing continues with the next 
entity name. 

ICH 101031 NOT AUTHORIZED TO DEFINE entity-name 

The RDEFINE command user does not have sufficient authority to 
define the indicated resource to RACF. Command processing 
continues with the next entity-name in the list. 

ICH 1 1 041 NOT AUTHORIZED TO ADD member-name 

The RDEFINE command user does not have sufficient authority to 
specify the indicated resource name on the ADDMEM operand. 
Command processing continues with the next member-name. 

ICH 1 020 1 1 NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the REDEFINE 
command, or RACF is not active. The command is terminated. 



You do not have sufficient authority to specify the GLOBALAUDIT 
operand for 'entity-name'. The operand is ignored and command 
processing continues with the next operand. 

ICH 1 1 0021 AUTHORIZED TO ISSUE ONLY GLOBALAUDIT 
FOR entity-name; REMAINING OPERANDS 
IGNORED 

You have specified operands in addition to GLOBALAUDIT, but for 
the indicated 'entity-name', you are only authorized to specify the 
GLOBALAUDIT operand. All operands other than 
GLOBALAUDIT are ignored and command processing continues. 

ICH 1 1 0031 NOT AUTHORIZED TO SPECIFY OWNER FOR 
entity-name; OPERAND IGNORED 

You do not have sufficient authority to specify the OWNER operand 
for the indicated 'entity-name'. The OWNER operand is ignored and 
command processing continues. 

ICH1 1 0041 operand DOES NOT APPLY TO class-name CLASS 
ENTITIES; OPERAND IGNORED 

The indicated 'operand' does not apply to class 'class-name'. The 
operand is ignored and command processing continues. 
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ICH1 10051 



LIST OF ENTITY NAMES SPECIFIED; operand 
OPERAND IGNORED 



You have specified an entity name list. Only a single entity name is 
allowed (1) when the ADD VOL or DELVOL operands are specified 
or (2) when the class-name is specified as GLOBAL and the 
ADDMEM or DELMEM operands are specified. The operand is 
ignored and command processing continues. 



ICH11006I 



NOT AUTHORIZED TO SPECIFY ADDVOL; 
OPERAND IGNORED 



You do not have sufficient authority to specify the ADDVOL 
operand. The operand is ignored and command processing continues. 

ICH1 1 0071 entity-name CANNOT BE SPECIFIED IN DELVOL 
LIST; entity-name NOT DELETED 

The volume serial number indicated by 'entity-name' was specified on 
the name-list operand and the DELVOL volume-serial-list operand. 
Command processing ignores the request to delete the entity name 
and continues processing with the next volume serial number 
specified on the DELVOL operand. 



ICH1 12011 NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the RALTER 
command, or RACF is not active. The command is terminated. 

ICH1 13011 entity name AND REMAINING ENTITIES NOT 
ALTERED 

The indicated 'entity-name' and remaining entity names in the list 
were not altered because of one of the following: 

• A RACF manager error occurred. In this case, the message is 
preceded by a RACF manager error message explaining the 
error. 

• A system error occurred while building in-storage profiles (via 
RACLIST) for the entity names specified by the ADDMEM 
operand or the member class associated with the specified class 
is currently inactive. 

• A system error occurred while checking (via FRACHECK) the 
user's authority to the entities specified by the ADDMEM 
operand. 



ICH1 1 1021 entity-name NOT DEFINED TO CLASS class-name 

The indicated 'entity-name' has not been previously defined to 
RACF in the class 'class-name'. Command processing continues with 
the next entity name. 

ICH 1 1 1 031 NOT AUTHORIZED TO ALTER entity-name 

You do not have sufficient authority to alter the entity 'entity-name'. 
Command processing continues with the next entity name. 



ICH1 11041 



volser NOT IN VOLUME SET OF entity-name; 
VOLUME NOT DELETED 



ICH1 13021 VOLUME volser AND REMAINING VOLUMES NOT 
[ADDED/DELETED] 

The indicated 'volser' and all remaining volumes in the 
ADDVOL/DELVOL list were not added to or deleted from a 
volume set because an error occurred in the RACF manager. A 
RACF manager error message precedes this message and explains the 
error. Other operands on the command have been processed. The 
command is terminated. 

ICH1 1 3031 MEMBER member-name AND REMAINING 
MEMBERS NOT PROCESSED FOR ENTITY 

entity-name 



The indicated volume serial number 'volser' specified on the 
DELVOL operand does not belong to the volume set of the entity 
'entity-name'. The volume serial number 'volser' is not deleted. 
Command processing continues. 



An error occurred in the RACF manager that prevented the indicated 
resource from being added to or deleted from the indicated resource 
group. A RACF manager error message precedes this message. 
Other operands on the command have been processed. 



ICH 1 1 1 051 member-name ALREADY DEFINED TO GROUP 

entity-name 



RDELETE Command Messages 



The resource name specified on the ADDMEM operand is already a 
member of the resource group being altered. Command processing 
continues with the next member-name. 

ICH 1 1 1 061 volser ALREADY DEFINED TO CLASS TAPE VOL 



ICH 1 2 1 021 entity-name NOT DEFINED TO CLASS class-name 

The indicated 'entity-name' has not been previously defined to 
RACF in the class 'class-name'. Command processing continues with 
the next entity name in the list. 



The volume serial number 'volser' specified on the ADDVOL 
operand is already defined to RACF in the TAPEVOL class. 
Command processing continues with the next operand. 

ICH 1 1 1 071 member-name NOT DEFINED TO GROUP 

entity-name 

The resource name specified on the DELMEM operand is not a 
member of the resource group being altered. Command processing 
continues with the next member-name. 



ICH1 21031 NOT AUTHORIZED TO DELETE entity-name 

You do not have sufficient authority to delete the indicated 
'entity-name'. Command processing continues with the next entity 
name in the list. 

ICH 122011 NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the RDELETE 
command, or RACF is not active. The command is terminated. 



ICH 111081 NOT AUTHORIZED TO ADD member-name 

The user of the RALTER command does not have sufficient 
authority to specify the indicated resource name on the ADDMEM 
operand. Command processing continues with the next 
member-name. 
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ICH 123011 entity-name AND REMAINING ENTITIES NOT 
DELETED 

The indicated 'entity-name' and all remaining entity names in the list 
were not deleted from RACF because a RACF manager error 
occurred. This message is preceded by a RACF manager error 
message which explains the error. The command is terminated. 

RLIST Command Messages 

ICH 1 300 1 1 NOT AUTHORIZED TO ISSUE command-name 

Your are not defined to RACF and cannot issue the RLIST 
command, or RACF is not active. The command is terminated. 

ICH 1 30021 NOT AUTHORIZED TO LIST entity-name 

You do not have sufficient authority to list the indicated 
'entity-name'. Command processing continues with the next entity 
name in the list. 

ICH13003I entity-name NOT FOUND 

The indicated 'entity-name' requested was not found in the RACF 
data set. 

ICH13004I NOTHING TO LIST 

You specified * for entity name and either there are no entities in that 
class or you do not have sufficient authority to list any of them. 

ICH 1 30051 RESGROUP DOES NOT APPLY TO class-name 
CLASS ENTITIES; OPERAND IGNORED 

The RLIST command user specified the RESGROUP operand and 
the specified class is a class for which resource groups are not 
allowed. The operand is ignored and command processing continues. 

SETROPTS Command Messages 

ICH14001I NOT AUTHORIZED TO ISSUE command-name 



oper - operation attempted 

xxxx - last seek address or block count 

ace - access method 

ICH 1 40041 UNABLE TO OPEN RACF DATA SET data-set-name 

The OPEN for the indicated 'data-set-name' failed. The command 
terminates. 

ICH1 40061 NOT AUTHORIZED TO CHANGE RACF OPTIONS; 
RACF CURRENTLY INACTIVE 

RACF has previously been set not active by the RVARY command. 
RACF options cannot be changed by the SETROPTS command until 
the RVARY command is issued and RACF is set active again. 

ICH 140091 RULEn HAS AN OVERLAPPING SPECIFICATION 
IN THE CONTENT RULES 

You have tried to use the SETROPTS command to define a syntax 
rule for use in your installation. The position values for the content 
keywords overlap. The following example illustrates overlapping 
position values: 

SETROPTS PASSWORD ( RULE 1 (LENGTH (8) - 
ALPHA(1:5) NUMERIC (4 : 8) ) ) 

The overlap occurs for positions 4 and 5 in the content keywords, 
ALPHA and NUMERIC. There are several ways to correct the error, 
depending on your intention for the rule. For example, 
"...ALPHA(1 :3) NUMERIC(4:8)..." is correct. 

RACF ignores this rule (and other rules specified by RULEn) but 
will process other PASSWORD options and other keywords specified 
on the SETROPTS command. 

ICH14010I * WARNING, THIS OPTION IS INACTIVE, IT 
REQUIRES THE 'INITSTATS' OPTION 

RACF requires that the INITSTATS option be in effect when you 
specify the LIST keyword on the SETROPTS command with any of 
the following options: INACTIVE, REVOKE, HISTORY, or 
WARNING. The command is terminated. 



You are not defined to RACF with sufficient authority and therefore 
cannot issue the SETROPTS command; or RACF is not active. The 
command is terminated. 



ICH 1 40 1 1 1 GLOBAL ACCESS CHECKING BASE TABLE IS 

ABSENT, NO GLOBAL ACCESS CHECKING CAN 
BE DONE 



ICH14002I NOT AUTHORIZED TO SPECIFY keyword 
I, key word...] 

You do not have sufficient authority to specify the keywords 
indicated. These keywords are ignored and command processing 
continues with the remaining keywords. 

ICH14003I I/O ERROR - jjj, sss, ddd, devtyp, ddn, oper, xxxx, ace 

A permanent I/O error occurred while processing on device 'ddd'. In 
the message text, the error analysis information provided by the 
SYNADAF data management macro instruction issued by the 
SYNAD routine was: 

jjj - job name 

sss - step name 

ddd - unit address of the device 

devtyp - device type 

ddn - data definition name 



During RACF Master Scheduler Initialization processing, an error 
prevented construction of the global access checking base table. 
Global access checking is disabled, but the GLOBAL options are set 
in the RACF CVT and in the RACF data set ICB. 

ICH 1 40 1 31 REFRESH IGNORED, NEITHER GENERIC NOR 
GLOBAL SPECIFIED 

Because no class was specified to be refreshed, the REFRESH 
operand is ignored. Command processing continues with the other 
operands. 

ICH1 401 41 GLOBAL ACCESS CHECKING BASE TABLE IS 
ABSENT, REFRESH CANNOT BE DONE 

During RACF initialization processing, an error prevented 
construction of the global access checking base table. Therefore, no 
global access checking or generic profile checking refresh can be 
done. Command processing continues with the other operands. 
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ICH 1 40 1 51 NOT AUTHORIZED TO REFRESH 

{GLOBAL | GENERIC} CLASS 'class-name' 

You do not have sufficient authority to refresh the given class. This 
class is ignored, and command processing continues. 

ICH 1 40 1 61 CANNOT REFRESH 'class-name', 

{GLOBAL | GENERIC} ACCESS CHECKING 
INACTIVE 

Because global access checking or generic access checking is inactive 
for the given class, no refresh can be done. This class is ignored, and 
command processing continues. 

ICH 1 40 1 71 ERROR ENCOUNTERED DURING GROUP 
AUTHORITY PROCESSING; COMMAND 
PROCESSING TERMINATED 

A RACF manager error occurred during the processing required to 
determine whether the command issuer has group authority. The 
command is terminated. 

R VAR Y Command Messages 



ICH1500U 



REQUEST DENIED - RACF PERMANENTLY 
INACTIVE 



The RACF CVT (RCVT) indicates that RACF is marked not active. 
The command is terminated. 

ICH 150021 D ATASET data-set-name ALREADY IN 
REQUESTED STATE 

The user requested that the indicated 'data-set-name' be made 
ACTIVE and the data set is currently active, or the user requested 
that the indicated 'data-set-name' be made INACTIVE and the data 
set is currently inactive. Command processing continues with the 
next data set name in the list. 



ICH15003I 



CHANGE TO RACF STATUS DENIED BY 
OPERATOR 



The system operator's reply to message ICH701A was no. A log 
record is written to SMF, and the command is terminated. 



ICH1 50041 



BACKUP DATASET CAN NOT BE SWITCHED; 
data-set-name IGNORED 



The user requested that the indicated 'data-set-name' be switched 
with its backup and the indicated 'data-set-name' is currently a 
backup data set. Command processing continues with the next 
'data-set-name' in the list. 



ICH15005I 



PRIMARY MASTER DATASET ACTIVE; 
NOCLASSACT/NOTAPE OPERAND IGNORED 



The user specified either the NOCLASSACT operand or the 
NOTAPE operand and the primary master data set is currently 
active. The operand is ignored and command processing continues. 



ICH15006I 



DATASET data-set-name HAS NO BACKUP; 
DATASET NOT SWITCHED 



The user requested that the indicated 'data-set-name' be switched 
with its backup and the indicated data set currently has no backup. 
Command processing continues with the next 'data-set-name' in the 
list. 



ALTGROUP Command Messages 

ICH20002I NOT AUTHORIZED TO ALTER group-name 

You do not have sufficient authority to alter the group 'group-name'. 
The command is terminated. 

ICH20003I NOT AUTHORIZED TO SPECIFY OWNER 

You do not have sufficient authority to specify the OWNER 
keyword. Processing continues with the owner field unchanged. 

ICH20004I ERROR FOUND IN GROUP TREE STRUCTURE 

An inconsistency or error was found in the group tree structure while 
processing the ALTGROUP command. The command is terminated. 
Use the LISTGRP command to list groups in the superior group tree 
structure, looking in particular for superior/subgroup disagreement. 

ICH20005I INSUFFICIENT AUTHORITY TO [SUPERIOR 
GROUP OF] group-name 

You do not have sufficient authority to change the superior group 
name 'group-name'. The command is terminated. 

ICH20006I xxxxxxxx CANNOT BE A SUPERIOR GROUP OF 

yyyyyyyy 

The command requested that group 'xxxxxxxx' be made the superior 
group of 'yyyyyyyy'. However, group 'yyyyyyyy' is already above 
group 'xxxxxxxx' in the group hierarchy and the result would be a 
circular definition that is invalid. The subgroup list for group 
'xxxxxxxx' is not changed. The command is terminated. 

ICH20007I [TERMUACC, NOTERMUACC] NOT ALTERED 
FOR GROUP group-name 

An error occurred while altering the TERMUACC or 
NOTERMUACC operand for the indicated 'group-name'. The 
TERMUACC and NOTERMUACC indicators in the group profile 
and connect entries are not updated. Command processing continues 
with the next operand. 

ICH20008I [TERMUACC, NOTERMUACC] NOT ALTERED for 
[USER userid, ANY USERS] 

An error occurred while either retrieving the access list of all users 
connected to the group (indicated by ANY USERS), or altering the 
TERMUACC or NOTERMUACC indicator in the connect entry for 
a user (indicated by USER 'userid'). In either case, the 
TERMUACC or NOTERMUACC indicator in the group profile was 
altered to the value specified on the command. If the error occurred 
while retrieving the access list, the command is terminated. If the 
error occurred while altering a particular user's connect entry, 
command processing continues with the next userid in the access list. 



ICH20009I 



group-name NOT ALTERED, PROGRAMMING 
LIMIT EXCEEDED 



While searching the index structure for the superior group of the 
group specified, more than 398 superior groups were found. This 
exceeds the RACF command limit. The SUPGROUP operand is 
ignored and processing continues with the next operand. 

ICH200 1 01 NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the ALTGROUP 
command, or RACF is not active. The command is terminated. 
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ICH200 1 1 1 COMMAND ENDED DUE TO ERROR 

An ESTAE environment could not be established. The command is 
terminated. 

ICH20012I RECOVERY UNSUCCESSFUL 

Backout was attempted, but the problem could not be corrected. The 
RACF utility programs may be needed to correct the error. The 
command is terminated. 

ICH20013I (group-name NOT ALTERED) 
(GROUP(S) NOT ALTERED/ 

An error occurred during ALTGROUP command processing and 
group 'group-name' was not altered. 

ICH2001 41 OWNER NOT ALTERED FOR group-name 

An error occurred while processing the owner field specified in the 
OWNER operand. The owner field is not altered and the command 
continues processing with the next operand. 

ICH20015I SUPGROUP NOT ALTERED FOR group-name 

An error occurred while processing the superior group field specified 
in the SUPGROUP operand. The superior group field is not altered 
and the command continues processing with the next operand. 



ALTUSER Command Messages 



ICH20016I 



NOT AUTHORIZED TO SPECIFY THE DATA OR 
NOD ATA KEYWORDS 



You do not have sufficient authority to alter the installation-defined 
data in the group profile. The proper authority is either OWNER of 
group or SPECIAL. The command is terminated. 



ICH20017I 



NOT AUTHORIZED TO SPECIFY THE MODEL OR 
NOMODEL KEYWORDS 



You do not have sufficient authority to specify the MODEL or 
NOMODEL operand on the ALTGROUP command. The proper 
authority is either OWNER of the group or SPECIAL. The command 
is terminated. 



ICH20018I 



WARNING, UNABLE TO LOCATE THE MODEL 
PROFILE FOR 'dsname' 



You have specified a model profile data set name that cannot be 
found on the RACF data set. For modeling to be effective for this 
data set name, a data set profile must first be created. However, 
RACF adds the data set name you specified to the group profile in 
anticipation that profile information for this name will be completed 
(using the ADDSD command) at a later time. 

RACF continues to process the ALTGROUP command. 

ICH20019I UNABLE TO LOCATE group-name 

The specified 'group-name' could not be found in the RACF data set. 
Command processing continues with the next group name in the list. 

ICH20020I OWNER-GROUP AND SUPERIOR GROUP MUST 
BE THE SAME FOR GROUP group-name 

When the owner of a group is another group, the owning group and 
the superior group must be the same. This message is followed by 
message ICH20014I and/or message ICH20015I. 



ICH21001I 
ICH21001I 



COMMAND ENDED DUE TO ERROR + 
UNABLE TO PROMPT FOR OIDCARD 



You specified the OIDCARD operand but TSO was unable to prompt 
you to enter the operator identification card. The command is 
terminated. Be sure you are executing the command in the 
foreground and in prompt mode. 



ICH2 10021 
ICH2 10021 



COMMAND ENDED DUE TO ERROR + 
UNABLE TO ESTABLISH ESTAE 



An ESTAE environment could not be established. The command is 
terminated. 



ICH21003I 
ICH210O3I 



COMMAND ENDED DUE TO ERROR + 
PUTGET ERROR RETURN CODE IS xx 



You specified the OIDCARD operand but the TSO PUTGET service 
routine failed with a return code indicated by 'xx' while trying to read 
the operator identification card. For an explanation of the return 
code, refer to OS/VS2 TSO Guide to Writing a Terminal Monitor 
Program or a Command Processor, GC28-0648. 

ICH2 10041 [userid, DFLTGRP, OWNER, USER] NOT ALTERED 

An error occurred during RACF processing. If 'userid' appears in the 
message, the indicated operation on 'userid' was not performed. If 
USER appears, the error occurred before a particular userid could be 
determined. Otherwise, the DFLTGRP or OWNER fields were not 
altered. 

ICH2 1 0051 NOT AUTHORIZED TO SPECIFY 

[REVOKE/RESUME, ADSP/NOADSP, DATA, 
AUTHORITY, SPECIAL/NOSPECIAL, OWNER, 
OPERATIONS/NOOPERATIONS, 
GRPACC/NOGRPACC, DFLTGRP, NAME, UACC, 
AUDITOR/NOAUDITOR, UAUDIT/NOUAUDIT, 
PASSWORD/NOPASSWORD, 
OIDCARD/NOOIDCARD], OPERAND IGNORED 

You do not have sufficient authority to specify the indicated operand. 
The operand is ignored. The next operand is processed. 

ICH2 1 0061 AUTHORITY SPECIFIED GREATER THAN THE 
COMMAND USER 

You have CONNECT authority and cannot specify JOIN authority. 
The other operands were modified. 

ICH2 10071 [NOPASSWORD, NOOIDCARD] OPERAND 
IGNORED 

You specified the NOPASSWORD or NOOIDCARD operand, but 
the OIDCARD or PASSWORD operand was not specified on the 
command or had not been previously established in the user's profile. 
The operand is ignored and command processing continues with the 
next operand. 

ICH2 1 0081 NOT AUTHORIZED TO SPECIFY 

CLAUTH/NOCLAUTH FOR [USER, TAPEVOL, 
DASDVOL, TERMINAL], CLASS IGNORED 

You do not have sufficient authority to specify the CLAUTH or 
NOCLAUTH operands for the indicated class. The class is ignored 
and command processing continues with the next class specified. 
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ICH2 1 0091 UNABLE TO LOCATE userid 

The specified user 'userid' could not be found in the RACF data set. 
The command is terminated. 

ICH2 1 1 01 NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the ALTUSER 
command, or RACF is not active. The command is terminated. 

ICH21011I [AUTHORITY, UACC] NOT ALTERED 

An error occurred during ALTUSER command processing. The 
AUTHORITY or UACC fields are not altered. 



either a user modifying his own entry, OWNER of entry, or 
SPECIAL. The command is terminated. 



ICH21018I 



WARNING, UNABLE TO LOCATE THE MODEL 
PROFILE FOR 'dsname' 



You have specified a model profile data set name that cannot be 
found on the RACF data set. For modeling to be effective for this 
data set name, a data set profile must first be created. However, 
RACF adds the data set name you specified to the user profile in 
anticipation that profile information for this name will be completed 
(using the ADDSD command) at a later time. 

RACF continues to process the ALTUSER command. 



ICH21012I AUTHORIZED TO ISSUE ONLY 

UAUDIT/NOUAUDIT FOR userid; REMAINING 
OPERANDS IGNORED 

You specified operands in addition to UAUDIT or NOUAUDIT, but 
for the indicated 'userid', you are only authorized to specify the 
UAUDIT or NOUAUDIT operands. All operands other than 
UAUDIT or NOUAUDIT are ignored. 

ICH21013A ENTER OPERATOR IDENTIFICATION CARD 

You have specified the OIDCARD operand. This message is 
requesting that you enter the operator identification card for the user 
being altered so that the information on it can be put into the user's 
profile. Command processing waits for you to enter the operator 
identification card. 



ICH21014I 
ICH21014I 



COMMAND ENDED DUE TO ERROR + 
TERMINAL TYPE NOT SUPPORTED 



You specified the OIDCARD operand, but when the operator 
identification card was entered it could not be verified because it was 
entered on a terminal that is not supported. The command is 
terminated. 



ICH21015I 



CLASS class-name AND REMAINING CLASSES 
NOT ALTERED FOR CLAUTH/NOCLAUTH 



The indicated 'class-name' and all remaining class-names in the 
CLAUTH/NOCLAUTH list were not added to or deleted from the 
list of authorized classes in the user profile because an error occurred 
in the RACF manager. A RACF manager error message precedes 
this message and explains the error. Other operands on the command 
have been processed. 



ICH21016I 



PASSWORD CHANGE FOR 'id' SUPPRESSED BY 
INSTALLATION PASSWORD EXIT 



The proposed password, as specified in the PASSWORD operand on 
the ALTUSER command, does not obey the syntax rules of the 
installation. (These rules were specified by the PASSWORD 
keyword, RULEn option, on the SETROPTS command.) The 
command is terminated. 

Contact the local administrator regarding the rules for new 
passwords. 

ICH2 1 1 71 NOT AUTHORIZED TO SPECIFY 

MODEL/NOMODEL, OPERAND IGNORED 

You do not have sufficient authority to specify the MODEL or 
NOMODEL on the ALTUSER command. The proper authority is 



ALTDSD Command Messages 

ICH2200 1 1 dsname NOT DEFINED TO RACF 

The specified data set 'dsname' is not defined to RACF and cannot 
be altered. Processing continues with the next data set. 

ICH22002I NOT AUTHORIZED TO SPECIFY OWNER 

You do not have sufficient authority to specify the OWNER 
keyword. The owner field is not changed. Processing continues with 
the next operand of the ALTDSD command. 

ICH22003I NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the ALTDSD 
command, or RACF is not active. The command is terminated. 

ICH22004I COMMAND ENDED DUE TO ERROR 

A RACF manager error occurred. This message is accompanied by a 
message explaining the error. 

ICH22005I NOT AUTHORIZED TO ALTER dsname 

You are not authorized to alter the data set 'dsname'. The data set is 
not altered. Processing continues with the next data set. 

ICH22006I OWNER SPECIFIED NOT DEFINED TO RACF 

I The userid or group name specified on the OWNER operand is not a 
RACF-defined user. Command processing continues with the next 
operand. 

ICH22007I OWNER SPECIFIED NOT AUTHORIZED TO 
GROUP 

The userid specified on the OWNER keyword does not have 
sufficient authority to the group whose name is the first level qualifier 
of the data set being altered. Command processing continues with 
the next operand. 

ICH22008I ADDVOL/DELVOL NOT ALLOWED FOR VSAM 
DATA SET 

The ADD VOL and DELVOL operands apply only to non-VSAM 
data sets. The ADD VOL or DELVOL operand is ignored. 
Command processing continues with the next operands. 
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ICH22009I 



VOLUME SPECIFIED ALREADY EXISTS IN DATA 
SET PROFILE 



ADDVOL or ALTVOL was specified which requests a volume to be 
added to the data set profile but the volume already exists in the 
profile. Processing for the ADDVOL or ALTVOL operand is 
terminated. 



ICH22010I 



VOLUME SPECIFIED DOES NOT EXIST IN DATA 
SET PROFILE 



DELVOL or ALTVOL was specified which requests a volume to be 
deleted from the data set profile but the volume does not exist in the 
profile. Processing for the DELVOL or ALTVOL operand is 
terminated. 



ICH22011I 



VOLUME SPECIFIED IS LAST VOLUME IN DATA 
SET PROFILE. NO CHANGE MADE 



ICH22020I 



GENERIC INVALID, GENERIC COMMAND 
PROCESSING NOT ACTIVE 



Because the generic command processing facility is inactive, the 
GENERIC operand is invalid. The command is terminated. 

LISTUSER Command Messages 



ICH30001I 



UNABLE TO LOCATE [USER, GROUP, CONNECT] 
ENTRY name 



The indicated entry 'name' could not be found on the RACF data set. 
If a user entry cannot be located, processing continues with the next 
entry. If a group or connect entry cannot be located, then an 
inconsistency exists on the RACF data set. The RACF utility 
programs may be needed to determine the inconsistency. All 
information that is available is listed. 



DELVOL was specified which requested that the last volume be 
deleted from the data set profile. This is not a valid request for the 
ALTDSD command. Processing for the DELVOL operand is 
terminated. 



ICH30002I NOT AUTHORIZED TO LIST [userid, *1 

You do not have sufficient authority to list the user 'userid' or specify 
*. The command is terminated. 



ICH22012I NOT AUTHORIZED TO SPECIFY NOSET 

You do not have sufficient authority to specify the NOSET operand. 
The NOSET, ADDVOL, and DELVOL operands are ignored. 

ICH220 1 31 ADD VOL/DELVOL NOT PROCESSED 

While adding or deleting a volume, the command processor could not 
establish the required ESTAE environment. Other operands have 
already been processed. 

ICH220 1 41 NOT AUTHORIZED TO SPECIFY GLOB ALAUDIT 
FOR 'entity-name'; OPERAND IGNORED 

You do not have sufficient authority to specify the GLOBALAUDIT 
operand for 'entity-name'. The operand is ignored for 'entity-name'. 

ICH22015I AUTHORIZED TO ISSUE ONLY GLOBALAUDIT 
FOR entity-name; REMAINING OPERANDS 
IGNORED 

You do not have sufficient authority to specify any operand except 
GLOBALAUDIT for 'entity-name'. All other operands are ignored 
for 'entity-name'. 



ICH22016I 



VOLUME SPECIFIED ALREADY EXISTS IN 
ANOTHER PROFILE FOR SAME DATASET NAME 



An ADDVOL or ALTVOL request was specified, but the volume 
serial number to be added to the data set profile specified is already 
defined in another data set profile of the same name. The volume 
serial number is not added. 



ICH30OO3I GROUP group-name USER CONNECTION NOT 
INDICATED 

The user profile being listed identifies the group 'group-name' as a 
connected group, but the group entry does not reference the user. 
An inconsistency exists on the RACF data set. The RACF utility 
programs may be needed to determine the inconsistency. All 
information that is available is listed. 

ICH300 1 01 NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the LISTUSER 
command, or RACF is not active. The command is terminated. 

ICH30O1 II NOT AUTHORIZED TO LIST ANY USERS 

You specified LISTUSER *, but you are not authorized to list any 
user. 

SEARCH Command Messages 

ICH3 1 00 1 1 NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the SEARCH 
command, or RACF is not active. The command is terminated. 



ICH31002I 



UNABLE TO OPEN CLIST DATA SET, COMMAND 
TERMINATED 



SEARCH command processing could not open the specified CLIST 
data set. The command is terminated. 



ICH220 1 71 ALTVOL PROCESSING ENDED DUE TO ERROR 



ICH3 1 0031 MASK TOO LONG. COMMAND TERMINATED 



While processing the ALTVOL operand, the command processor 
encountered an error which caused processing to be terminated. 
Other operands have already been processed. 

ICH220 1 81 INSTALLATION EXIT FAILED ALTER REQUEST 
FOR data-set-name 

The command pre-processing installation exit routine ICHCNX00 
issued a return code of 4, indicating that RACF should fail the 
ALTDSD request for the specified 'data-set-name'. The command 
terminates. Report this message to the system programmer. 



The character string specified on the MASK operand is longer than 
the maximum allowable length for the entity name in the specified 
class. For the DATASET class, the maximum length is 44 
characters; for the DASDVOL and TAPEVOL classes, the maximum 
length is 6 characters; and for the TERMINAL class, the maximum 
length is 8 characters. 
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ICH3 1 0041 LIST AND COST OMITTED, COMMAND 
TERMINATED 

CLIST must be specified on the SEARCH command when NOLIST 
is specified. The command is terminated. 

ICH3 1 0051 NO ENTRIES MEET SEARCH CRITERIA 

You do not have sufficient authority to list the entries in the RACF 
data set for the class specified on the command that meet the criteria 
specified on the MASK operand, or no entries exist in the class that 
meet the search criteria. 

ICH3 1 0061 CLIST DATA SET ORGANIZATION IS NOT 
SEQUENTIAL, COMMAND TERMINATED 

The CLIST data set found does not have physical sequential 
organization. The command is terminated. 

ICH3 1 0071 COMMAND ENDED DUE TO ERROR 

A RACF manager error occurred. This message is accompanied by a 
message explaining the error. 

LISTGRP Command Messages 

| ICH32002I NOT AUTHORIZED TO LIST [group-name) 

You do not have sufficient authority to list the group 'group-name'. 
| Command processing continues with the next group specified. 

ICH32004I NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the LISTGRP 
command, or RACF is not active. The command is terminated. 

ICH32005I NOT AUTHORIZED TO LIST ANY GROUPS 

You issued LISTGRP *, but are not authorized to list any group. 



LISTDSD Command Messages 

ICH35001I COMMAND ENDED DUE TO ERROR 

A RACF manager error occurred. This message is accompanied by a 
message explaining the error. 

ICH35002I NOT AUTHORIZED TO LIST data-set-name 

You do not have sufficient authority to data set 'data-set-name' and 
cannot list the data set. Command processing continues with the 
next data set. 

ICH35003I NO RACF DESCRIPTION FOUND FOR 
data-set-name 

The indicated data set 'data-set-name' could not be found on the 
RACF data set. 

ICH35004I NOT AUTHORIZED TO ISSUE command-name 

You are not defined to RACF and cannot issue the LISTDSD 
command, or RACF is not active. The command is terminated. 

ICH35005I NO DATA SETS LISTED 

No data sets were found that you are authorized to list. 

ICH35006I INSTALLATION EXIT FAILED LIST REQUEST 
FOR data-set-name 

The command pre-processing installation exit routine ICHCNX00 
issued a return code of 4, indicating that RACF should fail the 
LISTDSD request for the specified 'data-set-name'. Processing of 
the LISTDSD commmand continues with the next data set specified. 
Report this message to the system programmer. 

ICH35007I NO RACF DESCRIPTION FOUND ON THE 
SPECIFIED VOLUME(S) FOR data-set-name 

The RACF data set does not contain a discrete profile for the 
specified data set 'data-set-name' for any of the volume serials given 
in the LISTDSD command. 
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Chapter 5: RACF Manager, Utility, Report Writer, and Miscellaneous Messages 



This chapter lists the messages issued by the RACF command 
processors (that reflect errors in the RACF manager), the utility 
programs, the utility command, and the report writer. These 
messages are routed to the command or utility user. 

The format of these messages is: 

ICHxxnnnt text 

Where: 

ICH identifies the message as a RACF message. 

xx identifies the function issuing the message. 

nnn is the message serial number. 

t is the type code, I = information, or A = action. 

Where the xx field identifies: 

xx Function/Program 

ICH51nnnt RACF Manager (see note) 

ICH61nnnt Cross-reference (ICHUT100) Utility Program 

ICH62nnnt RACF Data Set Verification (ICHUT200) Utility 

Program 

ICH63nnnt Block Update (BLKUPD) Utility Command 

ICH64nnnt RACF Report Writer (RACFRW) 

ICH65nnnt RACF Data Set Split/Merge (ICHUT400) Utility 

Program 

ICH70nnnt Miscellaneous 

Note: These common error messages are issued by the various 
RACF command processors based on return codes from the RACF 
manager. 

RA CF Manager Error Messages 

ICH5 1 00 1 1 SVC 1 32 UNABLE TO INVOKE PROCESSING 
ROUTINE 

RACF was unable to invoke the appropriate processing routine 
(RACF manager, RACLIST) because of one of the following errors, 
whose code is returned in register 0: 

Code Description 

Unable to establish ESTAE environment. 

1 The function code (3rd byte of parameter list) does not 
represent a valid function. 

ICH5 1 0021 NAME TO BE ADDED TO RACF DATA SET 
ALREADY EXISTS 

The name that was requested to be added to the RACF data set 
already exists on the RACF data set. 



ICH5 1 0031 NAME NOT FOUND IN RACF DATA SET 

A profile requested by the command does not exist on the RACF 
data set. If the command does not issue a message giving the profile 
name, the RACF list commands (LISTDSD, LISTGRP, and 
LISTUSER) can be used to determine inconsistencies in profiles 
associated with the command. 

ICH5 1 0041 PARAMETER LIST ERROR DETECTED BY RACF 
MANAGER 

The RACF manager has detected one of the following errors: 

• Input parameter list error. The following codes are returned in 
register 0. 

Code Description 

1 Entry name invalid. 

2 Action specified for delete. 

3 Invalid field name. 

4 Test specified for rename request. 
7 Entry type incorrect. 

• User work area not large enough to hold all the data. 

• User work area smaller than minimum allowable size. 

ICH5 1 0051 ATTEMPT TO DELETE RESTRICTED NAME 
DENIED BY RACF MANAGER 

An attempt was made to delete a restricted name. 

ICH5 1 0061 ALTER IN PLACE REQUEST REJECTED BY RACF 
MANAGER 

The requested ALTERI operation is invalid. 

ICH510O7I RACF DATA SET CANNOT BE ALTERED. IT HAS 
BEEN EXTENDED BY RACF UTILITY 

The RACF data set is marked extended and cannot be altered. 

ICH5 1 0081 DUPLICATE D ATASET NAME FOUND BUT 
VOLUME NOT SPECIFIED 

In processing a DASD data set request, the RACF manager found 
duplicate data set profiles in the RACF data set and did not process 
the request because the VOLUME operand was not specified on the 
request. 

ICH5 1 0091 VOLUME NOT FOUND 

In processing a DASD data set request, the RACF manager could not 
find the specified volume in any data set profile. 

ICH5 1 1 01 RACF D AT ASET ACCESS DENIED - RACF 
CURRENTLY NOT ACTIVE 

The RACF manager could not complete the requested operation 
because RACF is currently not active. 
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ICH510111 



RACF MANAGER PROCESSING ENDED DUE TO 
ERROR 



ICH62002I 



UNABLE TO OPEN DD SYSUT1 - COPY 
FUNCTION BYPASSED 



The RACF manager could not complete the requested operation 
because of a system error or a problem with the RACF data set. If 
the user is receiving write-to-programmer messages, then this 
message is preceded by message ICH401I, ICH405I, ICH406I, or 
ICH407I. If the user is not receiving write-to-programmer messages, 
then a TSO PROFILE WTPMSG command can be issued and the 
RACF command or utility rerun to receive write-to-programmer 
messages. However, messages ICH401I, ICH405I, ICH406I, and 
ICH407I are always sent to the security console for use by the RACF 
administrator. 

RACF Cross-reference Utility Program 
(ICHUT100) Messages 

ICH6 1 0001 OPEN FAILED FOR DD ddn 

The RACF cross-reference utility program was unable to open the 
ddname 'ddn'. The DD statement may be incorrect or missing. 

ICH6 1 00 1 1 INVALID INPUT (80 character input record) 

A name supplied as input to the cross-reference utility program has 
more than 8 characters. The remaining records are scanned for 
errors. The utility program terminates. 

ICH61002I UNAUTHORIZED USER 

You are not defined to RACF or do not have sufficient authority to 
run the cross-reference utility program. 

ICH6 1 0031 FOLLOWING NAMES NOT PROCESSED 

More than 1000 names were specified to the cross-reference utility 
program. Those names over 1000 are listed and are not processed. 

ICH6 1 0041 NO OCCURRENCES OF name 

The cross-reference utility program could not find the input 'name' 
on the RACF data set. 

ICH6 10061 SYSIN CONTAINS NO VALID INPUT. UTILITY 
TERMINATED 

The cross-reference utility program could not find valid input in 
SYSIN. The utility program terminates. 

ICH6 1 0071 INSUFFICIENT AUTHORITY TO 'name'; NAME 
IGNORED 

You are not authorized to list anything for the userid or group name 
specified. The name is ignored. 

RACF Data Set Verification Utility Program 
(ICHUT200) Messages 

ICH6200 1 1 UNABLE TO OPEN DD ddn - PROCESSING 
TERMINATED 

The verification utility program was not able to open the data set 
with ddname 'ddn'. The DD statement may be incorrect or missing. 



The verification utility program was not able to open the SYSUT1 
data set. The data set associated with DD SYSRACF has opened 
successfully and is used by the utility program. 



ICH62003I 



UNABLE TO OPEN DD SYSRACF 
CONTAIN RACF DATA SET 



SYSUT1 MUST 



The verification utility program could not open the SYSRACF data 
set. The data set associated with DD SYSUT1 is assumed to contain 
a copy of the RACF data set. 

ICH62004I INSUFFICIENT STORAGE - PROCESSING 
TERMINATED 

A GETMAIN failed for the buffers and work areas necessary for the 
verification utility program to function. The request was for storage 
from subpool 0. 

ICH62007I INVALID CONTROL STATEMENT 

The verification utility program found that the control statement 
contains a delimiter or contents errors. 

ICH62008I I/O ERROR - jjj, sss, ddd, devtyp, ddn, oper, err, xxxx, 
ace 

The verification utility program encountered a permanent I/O error 
while processing on device 'ddd'. In the message text, the error 
analysis information provided by the SYNADAF data management 
macro instruction issued by the SYNAD routine was: 

jjj job name 

sss step name 

ddd unit address of the device 

devtyp device type 

ddn data definition name 

oper operation attempted 

err error description 

xxxx last seek address or block count 

ace access method 

ICH62009I EOF ON SYSIN - PROCESSING TERMINATED 

The verification utility program found an end-of-file condition on the 
SYSIN data set. 

ICH6201 01 RACF DATA SET NOT FOUND - PROCESSING 
TERMINATED 

A failure occurred when the verification utility program made a 
request to dynamic allocation for information retrieval. 

ICH6201 21 INSUFFICIENT STORAGE FOR MAP FUNCTION - 
REQUEST TERMINATED 

A GETMAIN failed for the storage required by the verification 
utility program to perform the map function. The request was for 
storage from subpool 0. 

ICH620 1 41 RB A OF TOP LEVEL INDEX BLOCK IS INVALID - 
PROCESSING TERMINATED 

The verification utility program found an error in the RBA of the top 
level index block (in the ICB); either, (1) the last four bytes are zero, 
or (2) the first two bytes are not zero, or (3) the last ten bits are not 
zero (denoting an address not on a IK boundary). 
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ICH62015I 



RBA OF FIRST BAM BLOCK IS INVALID - MAP 
FUNCTION TERMINATED 



The verification utility program found an error in the RBA of the first 
BAM block (in the ICB); either, (1) the last four bytes are zero, or 
(2) the first two bytes are not zero, or (3) the last ten bits are not 
zero (denoting an address not on a IK boundary). 

ICH62017I SEQUENCE SET CHAIN FIELD IS BROKEN 

In processing all the index blocks, the verification utility program 
keeps a count of level 01 blocks. This count is used while processing 
the sequence set. While following the chain of level 01 blocks 
(sequence set), the utility program found a zero sequence set RBA 
before the count of level 01 blocks was reached. 



ICH62018I 



PROGRAM LIMIT EXCEEDED - PROCESSING OF 
INDEX BLOCKS TERMINATED 



More than six levels of index blocks were found by the verification 
utility program. Index block processing is terminated after six levels 
have been processed. Level 01 blocks are not processed. 

ICH62019I UNABLE TO OPEN DD SYSUT1 FOR READ 
AFTER COPY FUNCTION COMPLETED - 
PROCESSING TERMINATED 

The RACF data set verification utility program was not able to open 
the SYSUT1 data set for read after successfully copying the RACF 
data set defined by the SYSRACF DD statement. 

ICH62021 1 UNABLE TO LOAD SYSUT1 - UNRECOVERABLE 
I/O ERROR ON DD SYSRACF - PROCESSING 
TERMINATED 

While reading the blocks from the RACF data set defined by the 
SYSRACF DD statement, an unrecoverable error was encountered. 
Message ICH62008I precedes this message and describes the I/O 
error. 

ICH62022I UNABLE TO LOAD CLASS DESCRIPTOR TABLE 

The verification utility program was not able to load the class 
descriptor table. The verification utility program continues processing 
general classes using their class ID numbers instead of their 
class-names. 



ICH63002I OFFSET IS xxx 

On the BLKUPD utility command, the search argument specified on 
the FIND command was located at the hexadecimal value 'xxx' into 
the specified NEW or OLD block. 

ICH63003I CONFIGURATION NOT FOUND 

On the BLKUPD utility command, the search argument in the FIND 
command was not located in the specified NEW or OLD block. You 
can use the LIST command to view the contents of the NEW or OLD 
block. 

ICH63004I REPLACE COMPLETE 

On the BLKUPD utility command, the operation requested by the 
REP command is completed. 

ICH63005I VERIFY FAILED, REPLACE NOT DONE 

On the BLKUPD utility command, the string specified in the VER 
keyword of the REP subcommand was not found at the given offset 
or the string extended beyond the end of the block. The string was 
not replaced. You can use the LIST command to view the contents 
of the NEW block. 

ICH63006I READ FUNCTION ENDED. BLOCK NOT SAVED 

On the BLKUPD utility command, the function initiated by the 
READ command is ended and nothing is saved in response to the 
END command. The block was not written back to the RACF data 
set because either NOSAVE was specified, or no changes were made 
to the block, or UPDATE was not specified on the READ command. 

ICH63007I UPDATE CAUSES BLOCK OVERFLOW, NO 
CHANGES MADE 

On the BLKUPD utility command, the REP, or CHANGE and 
INSERT (under DISPLAY) operation is ignored because the 
modified block would be greater than 1024 bytes. 

ICH63008I BLOCK RESTORED 

On the BLKUPD utility command, the REREAD subcommand of 
READ is complete, the NEW block is again the same as the OLD 
block. 



Block Update (BLKUPD) Utility Command 
(ICHUT300) Messages 

ICH63001I INVALID COMMAND 

For the BLKUPD utility command, one of the following situations 
occurred: 

1. The command is unknown. 

2. The command is a subcommand of READ and was entered 
without first entering the READ command. 

3. A subcommand of READ or DISPLAY requires updating the 
RACF data set but UPDATE was not specified on the READ 
command. 

4. A READ (or DISPLAY) is in progress but the command entered 
is not a subcommand of READ (or DISPLAY). The command 
is bypassed; enter the next command. 



ICH63009I DISPLAY ENDED. CHANGES SAVED 

On the BLKUPD utility command, the DISPLAY function is ended 
and the updates saved. The block may be changed further by 
subcommands of READ. The END SAVE command will update the 
RACF data set with this block. 

ICH63010I DISPLAY ENDED. CHANGES NOT SAVED 

On the BLKUPD utility command, the DISPLAY function has ended 
without saving the changes made in response to the END (with 
NOSAVE) command, or because UPDATE was not specified on the 
READ command. 



ICH63011I 



INVALID DATA IN INDEX BLOCK. DISPLAY 
ENDED 



On the BLKUPD utility command, the entry identifier or the length 
in the index is not correct. The DISPLAY function is ended and any 
changes made are not saved. Use the LIST and REP subcommands 
of READ to correct the block. 



Chapter 5: RACF Manager, Utility, Report Writer, and Miscellaneous Messages 29 



ICH6301 21 BLOCK IS NOT A VALID INDEX BLOCK 

On the BLKUPD utility command, the block that is the object of a 
FORMAT or DISPLAY command is not a valid index block; the 
command is ignored. The following tests are made for a valid index 
block: 

1 . The first index block identifier (offset 00) must be X'8A'. 

2. The second index block identifier (offset 03) must be X'4E'. 

3. The displacement to free space must be greater than the 
displacement to the last entry. 

4. The displacement to free space must be less than 1024. 

5. The last byte before free space (the end of block delimiter) must 
be X'OC. 

6. The entry identifier for all entries must be X'21' or X'22\ 
except for the identifier of the last entry in a level 01 block 
which must be X'20'. 

7. The lengths of all entries must be correct. 

8. The pointer section identifier of each entry must be X'62' or 
X'66'. 

The LIST and REP subcommands of READ can be used to fix the 
block. 

ICH63013I READ FUNCTION ENDED. BLOCK SAVED 

On the BLKUPD utility command, the function initiated by the 
READ command is ended and the modified block is saved in 
response to the END command. 

ICH6301 41 RECORD NOT FOUND 

On the BLKUPD utility command, the RBA specified on a READ 
command is not within the extents of the RACF data set. 

ICH630 1 5 1 OPEN FAILED FOR DD SYSRACF 

The BLKUPD utility command could not open the RACF data set 
defined by the SYSRACF DD statement. 

ICH63016I I/O ERROR jjj, sss, ddd, devtyp, ddn, oper, err, xxxx, 
ace 

The BLKUPD utility command encountered a permanent I/O error 
while processing on device 'ddd'. In the message text, the error 
analysis information provided by the SYNADAF data management 
macro instruction issued by the SYNAD routine was: 

jjj job name 

sss step name 

ddd unit address of the device 

devtyp device type 

ddn data definition name 

oper operation attempted 

err error description 

xxxx last seek address or block count 

ace access method 



ICH6301 71 ENTRY NOT FOUND. LOGICAL LEVEL 1 
FOLLOWS 

On the BLKUPD utility command, the entry specified in a LOCATE 
command cannot be found. The level 1 block that ought to contain 
the specified entry is provided. 

ICH6301 81 INDEX BLOCK CHAIN FOR ENTRY IS BROKEN 

On the BLKUPD utility command, a block in the chain for a 
LOCATE command search is not a valid index block. The block is 
dumped in hexadecimal. The following tests are made for a valid 
index block: 

1-8. The same tests are made as shown for message ICH63012I. 

9. The RBA for the next block on the chain must be non-zero, 
with the two high order bytes zero, and represent an 
address on a IK boundary within the extent of the RACF 
data set. 

10. The level of the block must be below the level of the 
previous block on the chain. 

Correct the block in error by using the READ command and its 
subcommands. 

ICH6301 91 ERROR IN SEQUENCE SET BLOCK AT RBA rba 

On the BLKUPD utility command, the sequence set block at RBA 
'rba' contains an error. The block is dumped in hexadecimal. The 
following tests are made for a valid block: 

1 . The block must be in collating sequence with the previous block 
on the sequence set. 

2. The first index block identifier (offset 00) must be X'8A'. 

3. The second index block identifier (offset 03) must be X'4E'. 

4. The displacement to free space must be greater than the 
displacement to the last entry. 

5. The displacement to free space must be less than 1024. 

6. The last byte before free space (the end of block delimiter) must 
be X'OC. 

7. The entry identifier of the last entry in the block must be X'20'. 

8. The entry identifier for all other entries must be X'21' or X'22'. 

9. All entries must have correct lengths and pointer section 
identifiers of X'62' or X'66'. 

10. The block must be a level 01 block. 

11. The RBA for the next block in the sequence set must be 
non-zero, with the two high order bytes zero, and represent an 
address on a IK boundary within the extent of the RACF data 
set. 

Correct the block in error by using the READ command and its 
subcommands. 



The command is terminated with a return code 12. 
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ICH63020I ENTRY NOT FOUND. DISPLAY ENDED 

On the BLKUPD utility command, the DISPLAY command specified 
an entry that could not be found in the index block. The command is 
bypassed. 

ICH6302 1 1 BLKUPD ENDED DUE TO ERROR + UNABLE TO 
ESTABLISH ESTAE 

The BLKUPD utility command ended due to a system error. An 
ESTAE protection environment could not be established. BLKUPD 
command processing is terminated with a return code of 12. 



ICH64002I 



TOO MANY SUBCOMMANDS; IMAGES LOST ON 
OUTPUT LISTING 



ICH63022I 



COMMAND SYSTEM ERROR + rtn ERROR 
RETURN CODE IS xx 



The TSO service routine 'rtn' failed with a return code 'xx'. 
(BLKUPD command processing is terminated with a return code of 
12.) For an explanation of the TSO service routines return codes, 
refer to the publication OS/VS2 TSO Guide to Writing a Terminal 
Monitor Program or a Command Processor, GC28-0648. 

ICH63023I KEY LENGTH ERROR + COMPRESSION COUNT 
PLUS KEY LENGTH MUST BE FROM 1 to 44 
CHARACTERS 

On the BLKUPD utility command, after processing a CHANGE or 
INSERT command, the compression count plus the key length of the 
new entry is less than one or greater than 44. The change is not 
made. 

ICH63024I INVALID ICB. LOCATE ENDED 



The user has entered more than the maximum number (100) of 
subcommands that'the RACF Report Writer can reproduce on the 
output listing. Although all the subcommands are processed, the list 
of subcommands appearing on the output listing is incomplete. The 
RACF Report Writer prompts the user to enter another 
subcommand. 

ICH64003I report-name REPORT COMPLETE 

The named report has completed successfully. The RACF Report 
Writer continues with the next report or, if all reports have been 
processed, terminates normally. 

ICH64004I operand DOES NOT APPLY TO STATUS 
RECORDS; OPERAND IGNORED 

On the SELECT subcommand, the user has specified the named 
operand along with the STATUS operand. Because the named 
operand has no meaning for status records, the RACF Report Writer 
ignores it and prompts the user to enter another subcommand. 

ICH64005I LIMIT OF 50 SELECT AND EVENT 

SUBCOMMANDS HAS BEEN EXCEEDED; 
subcommand-name IGNORED 

The user has entered more than the maximum number (50) of 
SELECT and EVENT subcommands. The RACF Report Writer 
ignores the subcommand and prompts the user to enter another 
subcommand other than SELECT or EVENT. 



On the BLKUPD utility command, the LOCATE command found 
that the ICB in the RACF data set contains incorrect data. The 
LOCATE command is bypassed. Correct the ICB using the READ 
command and its subcommands. Check that the data set used is the 
correct RACF data set. 

ICH63025I ENTRY FOUND 

On the BLKUPD utility command, the entry requested by the 
LOCATE command was found via a sequence set search; the index 
block containing the entry follows. 

ICH63026I WARNING - FIRST INDEX ENTRY CHANGED 

On the BLKUPD utility command, a CHANGE, DELETE, or 
INSERT command has changed the first entry in an index block. The 
compression count in the remaining entries may be incorrect now. 



ICH64006I OPERAND DOES NOT APPLY TO event-name 
EVENT; OPERAND IGNORED 

On the EVENT subcommand, the user specified an operand that is 
invalid for the named event. The RACF Report Writer ignores the 
invalid operand and prompts the user to enter another subcommand. 

ICH64007I THERE IS NO PRECEDING SELECT 
SUBCOMMAND FOR THIS EVENT 
SUBCOMMAND; EVENT IGNORED 

The user has entered an EVENT subcommand without first having 
entered any SELECT subcommands. The RACF Report Writer 
ignores the EVENT subcommand and prompts the user to enter 
another subcommand. 

ICH64008I INVALID SUBCOMMAND 



ICH63027A ENTER SAVE OR NOSAVE 

On the BLKUPD utility command, SAVE or NOSAVE was not 
specified on the END command and must be entered to continue 
command processing. Enter SAVE if the changes are to be saved. 
Enter NOSAVE if the changes are not to be saved. 

RACF Report Writer (RACFRW) Messages 

ICH6400 1 1 SUBCOMMAND subcommand-name NOT FOUND + 
ANY SUBCOMMAND ENTERED AFTER 
subcommand-name MUST BE REENTERED 

The RACF Report Writer does not support the 'subcommand-name' 
entered. The RACF Report Writer ignores this subcommand and all 
subsequent RACF Report Writer subcommands, and prompts the 
user to enter another subcommand. 



The user has entered a subcommand that violates the syntax rules for 
subcommand names. The IKJSCAN TSO service routine detects the 
invalid subcommand; the RACF Report Writer ignores it and 
prompts the user to enter another subcommand. For an explanation 
of the syntax rules, refer to the publication OS/VS2 TSO Guide to 
Writing a Terminal Monitor Program or a Command Processor, 
GC28-0648. 



ICH64009I 



NOUSER/NOJOB COMBINATION INVALID; 
BOTH OPERANDS IGNORED 



On the SELECT subcommand, the user has specified both the 
NOUSER and the NOJOB operands. The RACF Report Writer 
ignores both operands and uses the defaults (USER and JOB) to 
select all user ids and jobnames. 
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ICH6430 1 1 RACFR W ENDED DUE TO PUTGET ERROR + 
PUTGET RETURN CODE return-code 

While the RACF Report Writer was prompting the user to enter a 
subcommand, an error occurred in the PUTGET TSO service routine. 
The RACF Report Writer terminates immediately. For an 
explanation of the TSO service routines return codes, refer to the 
publication OS/ VS2 TSO Guide to Writing a Terminal Monitor 
Program or a Command Processor, GC28-0648. 

ICH64302I RACFRW ENDED DUE TO IKJSCAN ERROR + 
IKJSCAN RETURN CODE return-code 

An error occurred in the IKJSCAN TSO service routine while it was 
checking the syntax of a RACFRW subcommand. The RACF 
Report Writer terminates immediately. For an explanation of the 
TSO service routines return codes, refer to the publication OS/VS2 
TSO Guide to Writing a Terminal Monitor Program or a Command 
Processor, GC28-0648. 

ICH64303I FILE ddname COULD NOT BE OPENED 

The RACF Report Writer could not open the file identified by 
'ddname'. The RACF Report Writer terminates immediately. The 
user should ensure that the DD statement exists or that the data set 
has been preallocated. 

ICH64304I SORT ERROR RETURN CODE 'return-code' 

OCCURRED WHILE PRODUCING 'report-name' 
REPORT; COMMAND TERMINATED 

The SORT/MERGE program encountered an error while sorting the 
records for the named report. The RACF Report Writer terminates 
immediately. For an explanation of the sort/merge return codes, 
refer to the publication OS/VS Sort /Merge Programmer's Guide, 
SC33-4035. 

ICH64305I NO INPUT DATASET ALLOCATED; COMMAND 
TERMINATED 

The user did not preallocate the RSMFIN file nor did the user specify 
the DATASET operand on the RACFRW command. The RACF 
Report Writer terminates immediately. 

RA CF Data Set Split /Merge Utility Program 
(ICHUT400) Messages 

ICH6500 1 1 ELEMENT NUMBER n OF RANGE TABLE IS OUT 
OF SEQUENCE 

The designated range table entry is out of collating sequence. 

ICH65002I UNABLE TO LOAD MODULE module-name TO BE 
USED AS RANGE TABLE 

The load module named in the TABLE keyword could not be loaded 
into storage. A STEPLIB DD statement might be missing. 

ICH65003I error-description ON ddname ATTEMPTING A 

!READ ) 
WRITE > OF BLOCK AT rba 
LOAD ) 

The described error occurred while attempting a BDAM read 
(READ), BDAM write (WRITE), or BSAM write (LOAD). The 
DDNAME of the file on which the error occurred is listed, along with 
the relative byte address (rba) of the block being accessed. 



ICH65004I RANGE TABLE CONTAINS NO ELEMENTS OR 

FIRST ELEMENT STRING IS NOT BINARY ZEROS 

The first fullword of the range table is binary zeros, indicating no 
elements in the table, or the string portion of the first element is not 
binary zeros, as is required. 

ICH65005I RACF DATA SET FULL ON ddname 

Space has been exhausted on the specified output data set. 

ICH65006I UNABLE TO OPEN dsname, ddname 

If the data set is for input, the utility terminates. If the data set is for 
output, only processing to that data set is terminated. 

ICH65007I INFORMATION RETRIEVAL FOR ddname FAILED 
WITH ERROR CODE code 

Dynamic allocation (SVC99) returned an unexpected error code to a 
request for information about the named 'ddname'. This indicates a 
system error. 

ICH65008I dsname SUCCESSFULLY OPENED FOR 
^INITIALIZATION^ 
(PROCESSING f ON ddname 

The named data set has been successfully opened (BSAM open for 
INITIALIZATION or BDAM open for PROCESSING) with the 
given 'ddname'. 

ICH65009I NO INPUT DD STATEMENTS FOUND - 
PROCESSING TERMINATED 

The utility cannot perform without at least one input data set. 

ICH65010I LOCK FUNCTION REQUESTED, 

ddname (ALREADY^ LOCKED 
(NOW J 

To prevent updates to the data set identified by 'ddname', the LOCK 
function is requested. If the data set was not located previously, it is 
locked at this time. 

ICH6501 1 1 LOCK RECOVERY (SUCCESSFUL \ FOR ddname 

(UNSUCCESSFUL) 



This message reports the results of the attempt to turn the 'extend' 
bit OFF in the ICB for the listed 'ddname'. If lock recovery is not 
successful, the bit will still be ON in that ICB. If lock recovery is 
successful, the bit has been turned OFF. 

ICH65012I entry-name IN CLASS class FROM ddname 1 IS 
DUPLICATE OF SAME NAME FROM ddname2 

The named entry could not be copied to an output data set because it 
has the same name as an entity already copied from another input 
data set. The entity is either in a class other than DATASET or the 
NODUPDATASETS option is in effect. 

ICH65013I INDEX ENTRY entry-name ON ddname POINTS TO 
A TAPE VOLUME SET OF WHICH IT IS NOT A 
MEMBER 

The index entry indicated by 'entry-name' does not appear in the 
volume list of the profile for the tape volume set to which it points. 
The index entry is not copied to an output data set. The tape volume 
set is copied if no other errors exist. 



32 Resource Access Facility (RACF): Messages and Codes 



ICH650 141 A TAPE VOLUME SET FROM ddname IS 

INCONSISTENT WITH THE RANGE TABLE, 
MEMBER NAMES FOLLOW: 

member-name member-name . . . 



The range table specified via the TABLE keyword does not designate 
all of the members of the set to be copied to the same output data set. 
The member names listed are not prefixed by the characters TAPE-, 
but the prefix was used when interrogating the range table. The tape 
volume set is not copied to output. 

ICH65015I A TAPE VOLUME SET FROM ddnamel CONTAINS 
A DUPLICATE OF entry-name FROM ddname2, 
MEMBER NAMES FOLLOW: 

member-name member-name . . . 



ICH65022I PARAMETER ERROR. KEYWORD 

'keyword-abbreviation' IS AMBIGUOUS 

The utility has more than one keyword with the character string 
indicated by 'keyword-abbreviation'. Ensure that abbreviations for 
keywords contain enough significant characters to make the 
abbreviation uniquely identifiable to the utility. 

ICH65023I PARAMETER ERROR. TEXT BEGINNING WITH 
'text' IS REDUNDANT OR CONTRADICTORY TO 
A PREVIOUS SPECIFICATION 

Either the keyword contained in the 'text' or its opposite form was 
specified previously. The utility uses the first specification of the 
keyword. 



ICH65024I 



PARAMETER ERROR. KEYWORD 'keyword(value)' 
CONTAINS AN UNACCEPTABLE VALUE 



Two tape volume sets contain the same name in their volume lists. 
Therefore, only one of the sets can be copied to the output data set. 
The entire tape volume set whose members are listed is not copied to 
output. 

ICH6501 61 abend-code ABEND DURING SPLIT/MERGE 
PROCESSING 

The specified abnormal termination occurred during the execution of 
the utility. 

ICH65017I UNABLE TO ESTABLISH RECOVERY 

ENVIRONMENT. PROCESSING TERMINATED 

Processing is terminated because adequate recovery cannot be 
provided. 

ICH650 1 81 OUTPUT PROCESSING TO ddname TERMINATED 
WHILE PROCESSING ENTRY entry-name 

Because of an error identified by the message immediately preceding 
this message on the output, no further processing of the data set 
indicated by 'ddname' is attempted. The data set should not be used 
as a RACF data set. 

ICH65020I SPECIFIED OPTIONS: parm 

The parameters specified by the user on the EXEC statement are 
listed. 

ICH65021I PARAMETER ERROR. TEXT BEGINNING WITH 
'text' CONTAINS AN UNDEFINED KEYWORD 

The listed text does not start with a keyword defined to the utility. 



The value specified is not acceptable when associated with the 
keyword listed. 

ICH65025I OPTIONS IN EFFECT: options 

All options, including default options, in effect for the execution of 
this utility are listed. 

RACF Miscellaneous Messages 

ICH70001I userid LAST ACCESS AT hh:mm:ss ON www, month, 
day, 19yy 

This message explains the last date and time that the user successfully 
logged on under TSO or submitted a batch job. Information includes 
hour, minute, second, day of week, month, day and year. 

The first time this message is issued for a user, the message will read 

This message is routed to the RACF-defined user indicated by 
'userid' and is issued only when the INITSTATS option (specified on 
the SETROPTS command) is active. 

ICH70002I YOUR PASSWORD WILL EXPIRE IN xxx DAYS 

Your password will expire within the specified number of days. 
RACF issues this message when the WARNING option on the 
PASSWORD keyword (specified on the SETROPTS command) is 
active. 

One purpose of this message is to alert a batch user that the password 
on the JCL statements will have to be changed within 'xxx days. 



ICH70003I 



YOU HAVE EXCEEDED THE MAXIMUM NUMBER 
OF RACF PASSWORD ATTEMPTS 



You have exceeded the number of consecutive unsuccessful password 
attempts your installation allows. RACF revokes the userid. To 
reactivate the userid, contact the system administrator. 
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Appendix A. Problem Determination 



Problem Determination 

Problem determination is the activity required to identify a failing 
hardware unit or program and determine who is responsible for 
support. 

Problem determination is accomplished by using procedures specified 
by IBM. In some cases, these procedures may be initiated by a 
message or code which requires operator or programmer response. 
The response may include the requirement for additional 

TABLE I 



problem-related data to be collected and will attempt, where possible, 
to indicate "probable" failure responsibility. 

Problem determination information is indulged for applicable 
messages and codes under the heading "Problem Determination." 
Standard problem determination actions are identified as items of 
Tables I and II. Unique actions are identified following the list of 
standard actions to be taken. In any case, it is intended that the 
specified actions be taken before calling IBM for support. 



If the problem recurs, follow the problem determination aids 
specified by the associated message or code before calling IBM for 
support. 

1 . If MSGLEVEL= ( 1 , 1 ) was not specified in the JOB statement, 
specify it and rerun the job. 

2. Save the console sheet from the primary console. For systems 
with remote consoles, save the remote console sheet. In systems 
with Multiple Console Support (MCS), save a copy of the hard 
copy log. 

3. Save the job stream associated with the job. 

4. Save the system output (SYSOUT) associated with the job. 

5. Make sure that the failing job step includes a: 

a. SYSABEND DD statement. 

b. SYSUDUMP DD statement. 

c. PL1DUMPDD statement. 

d. SYSMDUMP DD statement. 

6. Make sure that the PARM parameter of the EXEC statement 
specifies the following: 

a. MAP 

b. LIST 

c. DIAG 

d. MSG=AP 

e. CORE, if applicable 

f. XREF 

g. DUMP 

7. If SMP is used to make all changes to the system, execute the 
LIST CDS and LIST PTFBY functions of SMP to obtain a list 
of the current maintenance from the SMP control data set 
(CDS). 

If any changes are made to the system without using SMP, 
execute the LISTIDR function of the AMBLIST service aid 
program to obtain a list of all members with a PTF or local fix, 
and save the output. Execute the program against the: 

a. SYS1.LINKLIB data set 

b. SYS1.SVCLIB data set 

c. library containing the program that issued the message. 

d. SYS1.LPALIB data set 

8. Execute the IMCJOBQD (stand-alone) or IMCOSJQD 
(system-assisted) service aid program to obtain a formatted 
copy of the contents of the SYS1.SYSJOBQE or 



SYS1.SYSWADS data sets, SWADS or the resident job list. 
(Not applicable for VS2 MVS.) 

9. Execute the AMBLIST service aid program to obtain: 

a. an object module listing, specifying the LISTOBJ function. 

b. a load module map and cross-reference listing, specifying 
the OUTPUT=BOTH option of the LISTLOAD function. 

10. Have a copy of the Message Control Program (MCP) available. 

1 1 . Execute the AMDSADMP service aid program to dump the 
contents of real storage and page data sets on magnetic tape. 

After restarting the system, execute the appropriate function of 
the AMDPRDMP service aid program to print the required 
portion ofthe dump tape produced by AMDSADMP. 

Save both the tape form AMDSADMP (should further 
information from the tape be required) and the listing from 
AMDPRDMP. 

12. Execute the SEREP program, and save the resulting output. 

13. Save all the associated output. 

14. The normal response to this message requests the 
programmer/ operator to execute a specific program. Save all 
output from that program. 

15. Save the program listing associated with the job. 

16. Save the dump. 

17. Have the system generation (SYSGEN) output available from: 

a. Stage I 

b. Stage II 

18. Execute the EREP service aid, to dump the SYS1.LOGREC 
data set and save the resulting output. 

For MSS, execute the following program to dump the 
SYS1.LOGREC data set: 

a. Service aid IFCISDAO 

b. Program ISDASDAO with the DETAIL(ALL) parameter. 

19. Save the assembly listing associated with the job. 

20. Save the control cards associated with the job. 
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21 . Save the compiler output associated with the job. 

22. Save the source input associated with the job. 

23. Save the source program listing associated with the job. 

24. Run OLTEP diagnostics for the problem device and save the 
output. 

25. Execute the IEHLIST system utility program to obtain a list of 
the: 

a. volume table of contents of the associated volume, 
specifying the FORMAT option. 

b. volume table of contents of the associated volume, 
specifying the DUMP option. 

c. directory of the associated data set 

d. system catalog (if it is not a VSAM catalog)., 

26. Execute the IEBPTPCH data set utility to print the: 

a. directory of the applicable data set. 

b. applicable data set. 

c. applicable member. 

d. applicable procedure. 

27. Have the linkage editor/loader map available. 

28. Save the associated volume. 

29. Contact IBM for programming support. 

30. Contact IBM for hardware support. 

3 1 . Save the trace output data set. 

32. Print the GTF trace data set with the AMDPRDMP service aid 
program using the EDIT statement. 

33. Print the associated SVC Dump data set, using the 
AMDPRDMP service aid with the GO statement. 

34. Execute the Access Method Services LISTCAT command to: 

a. list the contents of the applicable catalog. 

b. list the catalog entries for the applicable objects and any 
related objects. 

35. Execute the following Access Method Services command: 

a. The MSS LISTMSF command for mountable volumes. 

b. The MSS LISTMSF command with the CARTRIDGES 
parameter. 

c. The PRINT command to list the contents of the mass 
storage volume control inventory data set. 

d. The LISTMSVI command. 

e. The LISTMSF command with the ALL parameter. 

36. Execute the Access Methods Services PRINT command to print 
the repair workfile. 

37. Execute the AMASPZAP service aid program using the 
ABSDUMP statement to print the contents of the applicable: 

a. Data set. 

b. Track. 



38. Execute the Access Method Services AUDITMSS command 
with the following parameter: 

a. The CHECK parameter. 

b. The MAP parameter. 

c. The READLABEL parameter. 

39. Execute the Access Method Services CHECKMSS command. 

40. Execute the Access Method Services COMPARET command. 

41. Execute the Access Method Services DUMPMSS command to 
dump the following: 

a. Formatted mass storage control storage. 

b. Mass storage control main storage. 

c. Mass storage control extended storage. 

d. Formatted Staging Adapter storage. 

e. * Staging Adapter main storage. 

f. Staging Adapter extended storage. 

g. Mass storage control tables. 

42. Save the latest output from the Mass Storage Control Table 
Create program. 

43. Display units for units associated with the problem area. If 
specific unit(s) is not know, display range of all virtual units. 
See your configuration path chart for address ranges. 

44. Obtain the RACF profile of the associated data set, where 
applicable. 

45. Stop the processor and use the hardware ALTER/DISPLAY 
facility to display: 

a. all general purpose registers. 

b. the PS W. 

c. main storage locations through 200 (hexadecimal) and 
7000 through 7080 (hexadecimal). 

46. If the AMDSADMP program resides on tape, save the tape. If 
the AMDSADMP program resides on disk, use the DUMP 
feature of IEHDASDR to print the SYS1.PAGEDUMP data set 
and cylinder track of this residence disk. 

47. Save the output (listings) of the stage 1 and stage 2 
AMDSADMP initialization jobs. 

48. Follow the procedures for item 9b of this table for load modules 
AMDSAPGE, AMDSAPRO and AMDSALDR of 
SYSl&periodLINKLIB. Use IEBUPDTE or IEBPTCH to print 
the AMDSADMP and AMDSADM2 macros from 
SYS1.MACLIB. 

49. Save the AMDSADMP dump output (tape or listing). 

50. If the program seems to be looping, use the display PSW feature 
of the hardware ALTER/DISPLAY facility along with the 
hardware instruction Step facility to trace the loop, instruction 
by instruction. 

51. If there is an error in the contents of a page data set dump, 
restart the system using a different page data set, then dump the 
original page data set using the DUMP feature of IEHDASDR. 

52. Use IEBCOPY to unload SYS1.IMAGELIB to tape. 

53. Have a list of RACF-defined entities available. 
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TABLE II 

GTF for Problem Determination 

Format 1 : Tracing Without Prompting for Event Keywords 

Before reproducing the problem, have the system operator issue a 
START GTF command specifying tape output, MODE=EXT and 
TIME=YES. In response to message AHL100A he should type 
TRACE=opt, where opt is the trace option indicated for the 
particular message or code, within the text of his reply. 

When data for the problem has been recorded, run the AMDPRDMP 
service aid program using the EDIT statement to format the trace 
output, specifying DDNAME=(ddname of the trace data set). 

Format 2: Tracing With Prompting for Event Keywords 

Before reproducing the problem, have the system operator issue a 
START GTF command specifying tap output, MODE=EXT and 
TIME=YES. In response to the message AHL100A he should 
specify the trace options indicated for the associated message or code 
within the text of his reply. Then, in response to the message 
AHL101A, he should specify the event keywords also indicated with 
the associated message or code. 

When data for the problem has been recorded, run the AMDPRDMP 
service aid program using the EDIT statement to format the trace 
output, specifying DDNAME=(ddname of the trace data set). 



Format 3: Specialized Tracing Action 

Before reproducing the problem, have the system operator issue a 
START GTF command specifying tape output, MODE=EXT and 
TIME=YES. In response to message AHL100A he should type 
'TRACE=SYS,USR,SLIP'. The DD statement for a data set in error 
should specify DCD=DIAGNS=TRACE. 

When data for the problem has been recorded, execute the EDIT 
function of AMDPRDMP specifying the options SYS and 
USR=FFF. 

Format 4: Specialized Tracing Action for VSAM 

Before reproducing the problem, have the system operator issue a 
START GTF command specifying tape output, MODE=EXT and 
TIME=YES. In response to message AHL100A he should type 
'TRACE=SYS,USR'. The DD statement for a data set in error 
should specify AMP=TRACE. 

When data for the problem has been recorded, execute the EDIT 
function of AMDPRDMP specifying the options SYS and 
USR=(FFF,FF5). 
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